Privacy Policy

At Avicroft, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, platform, and services (collectively, the "Service"). Please read this policy carefully to understand our practices regarding your data.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using our Service, including:

• Account information: Name, email address, phone number, and business name when you create an account
• Business data: Service listings, staff profiles, customer records, booking details, and other content you add to the platform
• Payment information: Billing details processed through our payment providers (Stripe and Paystack). We do not store your full credit card or bank account numbers on our servers
• Communications: Messages you send to us through our contact form, email, or support channels

1.2 Information Collected Automatically

When you access the Service, we may automatically collect:

• Usage data: Pages visited, features used, actions taken, and time spent on the Service
• Device information: Browser type, operating system, device type, and screen resolution
• Log data: IP address, access times, referring URLs, and error logs

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and send related notifications
• Send you transactional emails (booking confirmations, reminders, receipts) via our email provider, Resend
• Respond to your inquiries, comments, and support requests
• Analyze usage patterns to improve and optimize the Service
• Send you marketing communications (with your consent), which you can opt out of at any time
• Detect, prevent, and address fraud and security issues
• Comply with legal obligations

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the Service:

• Supabase: Database hosting and authentication
• Resend: Transactional and marketing email delivery
• Stripe: Payment processing for international transactions
• Paystack: Payment processing for African markets
• Vercel: Website and application hosting

3.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process, such as a court order, subpoena, or government request.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Row Level Security (RLS) policies on all database tables
• Regular security audits and vulnerability assessments
• Access controls limiting who can access your data within our organization
• Secure authentication with hashed passwords

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements
• Right to data portability: Request your data in a structured, commonly used, machine-readable format
• Right to restrict processing: Request that we limit how we use your data
• Right to object: Object to the processing of your personal data for marketing purposes
• Right to withdraw consent: Withdraw your consent at any time where we rely on consent to process your data

To exercise any of these rights, please contact us at hello@avicroft.com. We will respond to your request within 30 days.

6. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience on our Service. The types of cookies we use include:

• Essential cookies: Required for the Service to function properly (authentication, session management)
• Analytics cookies: Help us understand how visitors use the Service so we can improve it
• Preference cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will retain your data for up to 30 days to allow for account recovery, after which it will be permanently deleted. We may retain certain information as required by law or for legitimate business purposes, such as fraud prevention and record-keeping.

8. Children's Privacy

The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we may have collected information from a child, please contact us at hello@avicroft.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

11. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us: