Privacy Policy

1. What we collect

• Account data — the name, username, email address and password you give us when a shop or staff account is created. Passwords are stored only as secure hashes; we cannot read them.
• Business data your shop records — products, prices, stock, sales, receipts, invoices, expenses, and any customer details (such as a customer's name or phone number) that your shop chooses to enter. For this data your business is the data controller and Apex-Meta processes it on your instructions.
• Technical data — sign-in events (time, browser type, IP address) kept for security and shown to shop owners in their own audit trail, plus ordinary server logs needed to run and debug the service.
• Payment references — when a sale is paid by mobile money or a bank terminal, the cashier may record the transaction reference. We never see or store card numbers or mobile-money PINs. If online payment processing is enabled in future it will be handled by licensed payment processors.

2. What we don't do

We do not sell personal data. We do not run advertising trackers in the product or on this site. We use your email address to run the service (receipts, reports you request, password resets, important service notices) — not for spam, and any marketing email will always have an unsubscribe.

3. Where data lives

The hosted service and its database run on Render in Frankfurt, Germany (EU), with daily encrypted backups held in secure object storage. Because Obali is offline-first, the till also keeps a working copy of your shop's catalogue and queued sales on the till device itself (in the browser's local storage) so you can keep selling without a connection — that copy is under your physical control, one more reason to manage who can touch your till. Transactional email is delivered through Resend. These providers process data for us under their own security commitments; we share only what the service needs to function.

4. Who can see your shop's data

Your staff, according to the roles you give them — cashiers see the till, owners and managers see the back office. Every business's data is isolated from every other business's at the database level. Apex-Meta support staff can sign in to your shop to help you; support access always appears as a visible "Obali Support" identity and every support sign-in is logged.

5. How long we keep data

For as long as your account is active, because your sales history is the product. If you close your shop, we delete its data after a 30-day grace window (so an accidental closure isn't a catastrophe), except where the law requires longer retention. Backups age out on a rolling schedule after deletion.

6. Your rights

Under Ghana's Data Protection Act, 2012 (Act 843) you can ask us what personal data we hold about you, ask us to correct it, or ask us to delete it. Email hello@getobali.com and we will respond within 30 days. If your personal data was recorded by a shop that uses Obali (for example as their customer), the shop controls that data — contact the shop first, and we will help them honour your request.

7. Children

Obali is business software for adults. We do not knowingly collect personal data from children, and accounts require the holder to be at least 18.

8. Changes

If this policy changes materially we will tell you in the app or by email before the change takes effect, and this page always carries the current version and its date.

Contact

Apex-Meta Solutions, Accra, Ghana · hello@getobali.com · See also the Terms of Service.