Legal
Privacy Policy
Last updated
This policy explains how Onassis Group, a company registered in Nigeria, which provides Onassify, handles personal information on this website, in the Onassify Back Office (app.onassify.com) and in Onassify POS (pos.onassify.com).
1. Whose information this is
For your account and your use of this website, we decide how the information is used and are responsible for it.
Information your business enters about its own staff and customers belongs to your business. We store and process it only on your behalf and on your instructions, to run Onassify for you. If you are a shop's customer or employee, please contact that business first.
2. What we collect
- Account details: your name, email address, phone number and username. Passwords are stored in scrambled (hashed) form, so no one can read them.
- Business details: your company name, address, country, currency and branches.
- Records you enter: products, stock, sales, purchases, suppliers, expenses and audits.
- Staff details, if you use these features: names, positions, salaries and the bank details used for payroll.
- Customer details, if you record them: names, phone numbers, email and postal addresses, loyalty points and credit sales.
- Technical details: your IP address, sign-in times and basic browser information, which our servers record to keep accounts secure.
3. How we use it
We use this information to:
- Run Onassify: sign you in, save your records and show your reports.
- Keep accounts secure: spot unusual sign-ins, block fake sign-ups and limit repeated attempts.
- Send emails about your account, such as confirming your email address, resetting a password and the notifications you turn on.
- Answer your questions and fix problems.
- Meet our legal obligations.
We don't sell personal information, show adverts or use it for advertising. This website uses no analytics or advertising trackers.
4. Who helps us run Onassify
We use a small number of trusted providers, who may only use the information to provide their service to us:
- Amazon Web Services: hosts our servers, stores files and sends account emails.
- Cloudflare: delivers this website securely, checks that sign-ups come from real people and forwards email sent to our address.
- Google: provides the mailbox where we read and answer email you send us.
We may also share information when the law requires it, for example in answer to a valid court order.
5. Where your information is kept
Our servers and files are hosted by Amazon Web Services in Stockholm, Sweden, in the European Union. This means information is transferred outside Nigeria and Ghana. We do this with providers that protect it to the standard required by Nigeria's Data Protection Act 2023 and Ghana's Data Protection Act 2012.
6. How long we keep it
We keep your business's information for as long as your account is open. When an account is closed, we delete its information within 90 days, except anything the law requires us to keep for longer. Security records such as sign-in history are kept only as long as needed to protect accounts.
7. How we protect it
Everything is sent over encrypted (HTTPS) connections, passwords are hashed, and each staff member only sees what their role and branches allow. Within our team, only the people who need to support you or run the service can access customer data.
8. Your rights
You can ask us to:
- Give you a copy of the personal information we hold about you.
- Correct anything that is wrong.
- Delete your information, or stop or limit how we use it.
- Send your information to you or to another provider in a common format.
Email [email protected] and we will reply within 30 days. If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission or Ghana's Data Protection Commission.
10. Children
Onassify is for businesses and isn't meant for anyone under 18.
11. Changes to this policy
If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect.
12. Contact
Questions or requests about your information: [email protected].