Privacy Policy

1. Who We Are

Alfasente is a product of Byte Village Limited, a company incorporated in Uganda. We operate the Alfasente ERP web platform (https://erp.alfasente.com) and the Alfasente Business POS mobile application (together, the “Services”).

Questions about this policy may be directed to privacy@alfasente.com.

2. Information We Collect

Information you provide directly

• Business registration details (business name, TIN, VAT number)
• Account credentials (name, email address, password hash)
• Business operational data (products, customers, invoices, sales, payroll)
• Payment details (mobile money phone numbers used to initiate collections)

Information collected automatically

• Device identifiers and push notification tokens (mobile app)
• IP address and browser/device type for security and fraud prevention
• App usage logs (feature interactions, error reports)

Information we do not collect

• We do not store full mobile money PINs or card numbers
• We do not access your device camera beyond barcode scanning within the POS screen
• We do not sell your data to third parties

3. How We Use Your Information

• Providing the Services — operating your ERP, processing sales, generating invoices and receipts
• Payments — initiating and confirming mobile money collections via the Alfasente payments API
• Communications — sending transactional emails (invoices, receipts, subscription confirmations) via Resend
• Security — detecting unauthorised access, enforcing multi-tenant data isolation
• Support — diagnosing issues you report to us
• Billing — managing your Alfasente subscription plan and invoices

We do not use your business data for advertising or share it with marketing partners.

4. Data Storage and Security

Your data is stored on Supabase (PostgreSQL), hosted on infrastructure located within the European Union (AWS eu-west-1). Data is encrypted at rest and in transit (TLS 1.2+). Row-level security policies enforce strict tenant isolation — one business cannot access another's data.

Access to production systems is restricted to authorised Byte Village staff and is logged in an append-only audit trail.

5. Third-Party Services

Each sub-processor is contractually bound to process data only as instructed.

6. Data Retention

• Active account data is retained for the lifetime of your subscription
• After account cancellation, data is retained for 90 days then permanently deleted on request
• Financial records (invoices, receipts, payroll) may be retained for up to 7 years to comply with Ugandan tax law
• Audit logs are retained for 2 years

7. Your Rights

Under the Uganda Data Protection and Privacy Act, 2019 you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data (subject to legal retention obligations)
• Withdraw consent for processing where consent is the legal basis
• Lodge a complaint with the National Information Technology Authority — Uganda (NITA-U)

To request deletion of your account and data, use our self-service deletion form. For all other requests, email privacy@alfasente.com. We will respond within 30 days.

8. Children's Privacy

The Services are intended for use by businesses and individuals aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

9. Cookies and Local Storage

The web application uses browser cookies and local storage solely for authentication session management. We do not use tracking or advertising cookies. The mobile application uses device storage (AsyncStorage) to persist your login session locally.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the effective date at the top of this page and, for material changes, notify account holders by email. Continued use of the Services after changes constitutes acceptance of the updated policy.

11. Contact Us

Byte Village Limited
Kampala, Uganda
Email: privacy@alfasente.com
Website: https://erp.alfasente.com