Privacy Policy

Last updated: 30 July 2026

1. Who we are

Trade Junction provides business management software to shops in Zimbabwe. This policy explains what we collect, why, and your rights under Zimbabwe's Cyber and Data Protection Act [Chapter 12:07].

2. What we collect about you (the business owner or staff member)

• Account details: name, email, phone number, and (for sellers) a username, to create and secure your login.
• Business records you create: products, prices, stock, sales, expenses, staff roles, to provide the service. This is your data; we process it to run the app for you.
• Payment records: when you pay for a subscription via Paynow we store the amount, date, and Paynow reference. We never see or store your card, EcoCash PIN, or wallet credentials: payment happens on Paynow's platform.

3. Your customers' information

Shops may record a customer's name, WhatsApp number, and credit balance. For that information, the shop is the data controller (they decide to record it) and Trade Junction is the processor: we store it securely, use it only to provide the service to that shop (for example, sending a receipt to the customer's WhatsApp when the shop chooses to), and never use it for our own marketing or share it with anyone else.

If you are a shop's customer and want your details corrected or removed, contact the shop directly, or email us and we will facilitate it with the shop.

4. What appears publicly

A shop's online store page (its name, location, WhatsApp number, and the products it chooses to show) appears online only when the shop switches its online store on. A shop can switch it off at any time in Settings, which removes the page.

5. Where data lives and how it's protected

• Data is hosted on Supabase (Postgres) with row-level security: each business's data is technically isolated from every other business.
• Staff (seller) accounts can never see the business's cost prices or profits: enforced at the database, not just the app.
• All traffic is encrypted in transit (HTTPS). Passwords and PINs are hashed: we cannot read them.

6. Retention and deletion

• We keep your business records as long as your account exists, including while a subscription is lapsed (your books are never deleted for non-payment).
• You may request full export of your data at any time (CSV), and full deletion of your business and its data: we complete deletion within 30 days of a verified request.

7. What we don't do

• No selling or sharing of data with advertisers or data brokers. Ever.
• No tracking cookies or third-party analytics on the marketing site or app. The only cookies we set are the ones that keep you signed in.
• No reading of your business's numbers by our staff except to support you at your request, or as required by law.

8. Contact

Data questions, export or deletion requests: support@tradejunction.co.zw