Privacy Policy

1. What we collect

• Account data: your name and email, when you sign up or are invited to a workspace.
• Business data: whatever you enter to run your business — inventory, production records, orders, invoices, expenses, client and team information.
• Billing data: we never see or store your card details. Paystack, our payment processor, handles and stores payment information directly; we only receive confirmation that a payment succeeded and a reference code.

2. Why we process it

To provide the service you signed up for, process payments, respond when you contact us for support, and meet legal obligations (e.g. tax or financial record-keeping rules that apply to us as a business). We don’t sell personal data, and we don’t use your business data for advertising.

3. Who we share it with

We only share data with the processors that make the service work:

• Supabase — hosts our database and handles authentication. Your business data is stored here, isolated per workspace.
• Paystack — processes payments and holds your payment method details; we never receive your card number.
• Vercel — hosts the application itself.

These providers may process and store data on servers outside Ghana or Nigeria, under their own security and data-protection commitments. We don’t share your data with anyone else, and never for their own marketing purposes.

4. How it’s protected

Every workspace’s data is isolated at the database level — one business can never read another’s records, and this is enforced by database policy, not just by the app’s interface. Within a workspace, Staff accounts are blocked from seeing certain financial data (costs, margins, expenses, commissions) that only Owners/Admins can access. All connections to the service are encrypted in transit.

5. Your rights

Under Ghana’s Data Protection Act and Nigeria’s Data Protection Act, you can ask us to:

• confirm what personal data we hold about you and get a copy of it,
• correct inaccurate data,
• delete your data, subject to what we’re legally required to keep,
• object to or restrict certain processing.

To exercise any of these, contact us at support@quantumsme.app. If you’re not satisfied with our response, you can complain to Ghana’s Data Protection Commission or Nigeria’s Data Protection Commission, whichever applies to you.

6. How long we keep data

We keep your data for as long as your workspace is active, plus a reasonable period after cancellation to allow you to export it or reactivate, after which it’s deleted unless we’re required to retain it longer by law.

7. Cookies

We use only the minimum cookies needed to keep you signed in securely. We don’t use advertising or tracking cookies.

8. Children

Quantum SME is a business tool and isn’t directed at or intended for children.

9. Changes to this policy

If we make material changes, we’ll update the date above and, where appropriate, let account owners know directly.

10. Contact

Questions or requests about your data: support@quantumsme.app