Privacy Policy

Who we are

This policy explains how the PatoHQ website and application handle personal data.

What we collect

We collect the minimum needed to make PatoHQ work:

• Account information, your name, email address and password (stored securely and hashed).
• Business details, business name, location, currency, staff profiles and settings you add.
• Usage data, anonymised information about how you use the product, to improve it.
• Payment information, processed by Pesapal on their secure systems; we do not store card numbers.

Why we collect it

We use this data to provide the service, keep it secure, send important account notices, and improve PatoHQ. We do not sell personal data to anyone.

Who we share it with

Only the providers required to run the service, and only when necessary:

• Hosting provider (Cloudflare), stores data securely for us.
• Payment processor (Pesapal), processes subscription payments.
• Email provider, sends transactional and account emails.

Data retention

We keep your data for as long as your account is active, plus a short period after closing so you can change your mind. You can export your data at any time from your settings.

Your rights

You can access, correct, export or delete your data at any time. Contact us and we will action your request promptly.

How we protect data

Data is encrypted in transit, protected with row-level access controls so staff only see what their role allows, and access is limited to what's needed.

Children's privacy

PatoHQ is a business tool and is not intended for children under 16. We do not knowingly collect their data.