Privacy Policy

This policy describes how paytrack (“paytrack”, “we”, “us”) handles personal data for workspace owners and staff who use the product, and for their customers whose payment and agreement records are stored in a workspace. It applies to paytrack.ng and the paytrack application.

• Account data — name, email, phone number, and password (stored as a salted hash, never in plain text) for anyone who signs in, including via Google or GitHub.
• Workspace data — customer records, payment plans, agreements, contribution groups, Daily Contributions records, and payment history that a workspace’s staff enter or that flow in through Paystack.
• Payment data — transaction references, amounts, and status from Paystack. paytrack does not receive or store full card numbers, CVVs, or bank account credentials — those are handled directly by Paystack as our payment processor.
• Usage data — pages visited, actions taken, and device/browser information, used for reliability and product improvement.

To operate the product (recording payments, generating schedules, sending reminders), to authenticate sign-in, to send transactional email and SMS (receipts, reminders, OTP codes), to detect and prevent fraud or abuse, and to improve the product. We do not sell personal data.

• Paystack — payment processing for card, bank transfer, and dedicated virtual account collections.
• Supabase — database hosting and file storage.
• Resend — transactional email delivery.
• Termii — SMS delivery for reminders and OTP codes.
• Google and GitHub, only for the OAuth handshake when a user chooses to sign in with one of those providers — paytrack receives an email and name, never a password.

Account and workspace data is retained for as long as the account is active, plus a reasonable period afterward to satisfy financial record-keeping and dispute-resolution needs. Specific retention periods for different record types are one of the items flagged below for legal review.

Depending on applicable law, you may have rights to access, correct, export, or request deletion of your personal data. Contact us using the details below to make a request. The specific rights available under the Nigeria Data Protection Act 2023 and how paytrack fulfills them are covered in the legal-review note below.

paytrack uses cookies for session authentication (signed, HTTP-only) and, on the marketing site, for analytics and remembering acquisition source. A decorative “last used sign-in method” cookie is used only to pre-select a button on the login page and is never trusted for authentication.

paytrack is a business tool and is not directed at children. We do not knowingly collect data from children.

We’ll update the date below when this policy changes and, for material changes, aim to give notice through the product.

Questions about this policy: reach us via the contact page.