Privacy Policy

1. Introduction

QuickSale ("we", "our", "us") is a Point of Sale platform operated by Kaloo Technologies. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform, including our web application, mobile money wallet services, and payment processing features.

By using QuickSale, you consent to the practices described in this policy. If you do not agree, please discontinue use of the platform.

2. Information We Collect

2.1 Account Information

When you register, we collect:

• Full name (display name)
• Email address
• Phone number
• Password (stored in hashed form; we never store plain-text passwords)

2.2 Store Information

When you create a store, we collect:

• Store name, description, and address
• Province, district, area, and street
• Store phone number
• Store logo and cover images (if uploaded)

2.3 Transaction Data

We collect information about transactions processed through the platform:

• Order details (products, quantities, prices, totals)
• Payment method and status
• Cashier information (who processed the sale)
• Date and time of transactions
• Payment link references and associated data

2.4 Mobile Money & Wallet Data

If you enable the wallet feature, we additionally collect:

• Mobile money phone numbers for collections and withdrawals
• Transaction amounts, fees, and statuses
• Wallet balance history
• Mobile money provider details

2.5 Automatically Collected Information

• IP addresses and browser type
• Device information
• Access times and pages viewed
• Authentication tokens and session data

3. How We Use Your Information

We use the information collected to:

• Provide Services: Process sales, manage inventory, handle payments, and operate the wallet
• Account Management: Authenticate users, manage roles (admin/cashier), and maintain security
• Payment Processing: Facilitate mobile money collections, payment link transactions, and wallet withdrawals through our payment partner (Lenco)
• Communication: Send transaction receipts, service updates, and important account notifications
• Analytics: Generate sales reports, revenue dashboards, and business insights for store owners
• Compliance: Meet legal obligations, prevent fraud, and enforce our terms of service
• Improvement: Analyze usage patterns to improve the platform

4. Information Sharing & Disclosure

We do not sell your personal information. We may share information with:

4.1 Payment Partners

We share necessary transaction data with Lenco, our payment processing partner, to facilitate mobile money collections and disbursements. This includes phone numbers, amounts, and reference numbers.

4.2 Within Your Organisation

Store admins can view cashier activity, transaction history, and sales data for their store. Cashiers can only view data relevant to their own transactions.

4.3 Legal Requirements

We may disclose information when required by law, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

5. Data Security

We implement industry-standard measures to protect your data:

• All data transmitted via HTTPS/TLS encryption
• Passwords hashed using bcrypt with salt
• JWT-based authentication with token expiry
• Role-based access control (admin vs. cashier permissions)
• Database access restricted to authorised application services
• Regular security reviews and updates

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Account Data: Retained until account deletion is requested
• Transaction Records: Retained for a minimum of 7 years for financial compliance
• Wallet Transactions: Retained for the lifetime of the wallet plus 7 years
• Session Logs: Retained for 90 days

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your account and associated data (subject to legal retention requirements)
• Portability: Request your transaction data in a machine-readable format
• Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, contact us at support@kalootech.com.

8. Cookies & Local Storage

QuickSale uses browser local storage to maintain your login session (authentication tokens) and store preferences. We do not use tracking cookies or third-party advertising cookies.

9. Children's Privacy

QuickSale is a business tool and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we discover we have collected data from a child, we will delete it promptly.

10. International Data

QuickSale primarily operates in Zambia. Your data may be stored and processed on servers located outside your jurisdiction. By using our platform, you consent to the transfer of your data to these servers.

11. Facebook & Instagram Advertising (Meta)

QuickSale lets a store promote its products and its QS Market store page as ads on Facebook and Instagram, using the Meta Marketing API. This feature is optional and only runs when a store chooses to use it.

11.1 Ads run through your own Facebook page

If you connect your own Meta ad account, we store the ad account ID, the Facebook Page ID and the access token you provide. The token is kept on our access-controlled servers, is used only to create and read the status of the campaigns you ask us to create, and is deleted when you disconnect the account. We never post to your Page, read your messages or followers, or use the token for any other purpose.

11.2 Ads run through the QuickSale page

If you choose to run ads through the QuickSale page and pay from your QuickSale wallet, the ads are published under Kaloo Technologies' own Meta ad account and Page. We share with Meta only the ad content you create: the product name, image, headline, text and the link to your QS Market store page. No customer, order or wallet data is sent to Meta.

11.3 What Meta receives and provides

Meta receives the ad creative and budget you set, and returns campaign, ad set and ad identifiers together with delivery status, which we store against your store so you can see your campaigns. Meta processes this data under its own Privacy Policy. QuickSale does not receive any personal data about the people who see or click your ads.

11.4 Deleting your Meta data

Disconnecting your Facebook account on the Facebook Ads page removes your access token immediately. To have every Meta-related record for your store (connection, campaigns and ad history) deleted, email support@kalootech.com from your registered address; we complete deletion within 30 days and confirm by email.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the platform or via email. Your continued use of QuickSale after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy, contact us:

• Kaloo Technologies
• Email: support@kalootech.com
• Website: kalootech.com