Privacy Policy

Novend is a commercial Point of Sale and business management platform operated by Asiedu Development Hub, based in Sunyani, Bono Region, Ghana.

Privacy questions, data access requests, and complaints can be sent to asiedudev.hub@gmail.com. For WhatsApp (UK) use +44 7868 178108. For calls and WhatsApp in Ghana use +233 55 525 7482.

If you use Novend on behalf of a business, that organization is typically the controller of its operational business records (products, sales, customers). We process that data to provide the Service under our agreement with the organization.

This Policy covers information processed through novendpos.com (and related domains), the Novend web application, desktop applications for Windows, macOS, and Linux, the Android application, and the iOS Progressive Web App (Home Screen install) that connect to the same Novend service.

It does not cover third-party websites or services that we do not control, even if linked from Novend. Those services have their own privacy practices.

Account and profile information: name, email address, phone number (if provided), organization name, role, and authentication credentials (passwords are stored using secure hashing via our auth provider — we do not store plaintext passwords).

Business operational data you and your staff enter: products, categories, SKUs, barcodes, pricing, inventory quantities and movements, sales, receipts, returns, customers, suppliers, branches, users, expenses, analytics inputs, and related notes.

Device and technical information: device activation identifiers, app or client version, operating system hints, whether you are using the web app, desktop app, Android app, or iOS PWA, sync status, approximate timestamps, and diagnostic logs needed to operate and secure the Service.

Catalog import files you choose to upload (CSV or Excel) are processed so your organization can create or update products. We do not retain the original spreadsheet as a stored catalog file. Import summaries such as filename, row counts, and saved column mappings may be kept for support, plan administration, and to let you reuse mappings.

Billing and commercial information: plan selection, subscription or lifetime licence status, invoices and payment references processed through our payment providers, and related support history.

Communications: messages you send to support or sales, and feedback you provide about the product.

We do not intentionally collect special categories of personal data beyond what you choose to store in your own business records (for example customer phone numbers). You are responsible for lawful collection of your customers’ data at the counter.

To provide, maintain, and improve offline-first POS, inventory, wholesale, catalog import, report and catalog export, sync, analytics, reporting, and support features.

To authenticate users, enforce roles and organization isolation, apply plan limits, and protect accounts against unauthorized access.

To process billing, trials, upgrades, and related customer communications.

To diagnose outages, prevent abuse, and improve reliability and performance.

To send important service notices (security, downtime, material policy or terms changes) and, where permitted, product updates relevant to your use of Novend.

We do not sell your business customer lists, inventory data, or sales history to third parties for their marketing.

Novend is designed so operational data can be stored on your device first, allowing sales to continue without internet connectivity after setup and activation.

When connectivity is available, committed changes synchronize to Novend cloud services so you can access dashboards, backups, multi-device workflows, and organization-wide reports. Dashboards update from local data while you work and refresh after synchronization, depending on your connectivity and plan mode.

Cloud connections use encrypted transport. Portable backups you export can be encrypted with a password you control. The active local operational database (IndexedDB) on a till or phone is not field-encrypted — it relies on device lock screens, browser or WebView profile isolation, and physical custody of the hardware.

Treat POS devices as sensitive business equipment: enable Settings → Security → Inactivity lock on shared tills, use OS lock screens, control physical access, sign out when handing a device to another person, and deactivate lost devices through your administrator where possible.

You remain responsible for the accuracy of business records you enter and for deciding which staff may access which branches and capabilities inside your organization.

We share information with infrastructure, authentication, analytics (if enabled), and payment providers strictly as needed to operate Novend under appropriate agreements.

Desktop and Android installers may be delivered through our secure download channels. The iOS client is currently a Progressive Web App you install from the browser; a native iOS application, if published later, is delivered the same way as other official packages. Version details and release notes may be stored in our systems so the Download page stays up to date.

We may disclose information if required by applicable law, regulation, legal process, or to protect the rights, safety, and integrity of the Service, our users, or the public.

Organization administrators control which staff can access business data inside their Novend workspace. We do not grant other Novend customers access to your organization data.

If we engage in a merger, acquisition, or asset transfer, information may transfer as part of that transaction subject to continued confidentiality commitments where required.

Novend may process and store information on servers and infrastructure located outside Ghana, including cloud regions used by our providers.

By using the Service you understand that your information may be transferred to and processed in countries that may have different data protection rules than your own. We take commercially reasonable steps to protect information in transit and at rest.

We retain account and business data for as long as your organization uses Novend and as reasonably needed afterward for legitimate business, security, dispute resolution, backup, and legal compliance purposes.

You may delete your staff account or, if you are the business owner, schedule organization closure from Settings → Privacy & data in the product. Owners have 30 days to undo closure before access is fully blocked. Administrators and managers can also export reports and catalogs (CSV on every plan; Excel and PDF according to plan entitlements). Some records may remain in backups or audit logs for a limited period after deletion requests, consistent with operational and legal needs.

Completed sales and receipts are designed to remain immutable for integrity; corrections are handled through return and related workflows rather than silent edits.

We use administrative, technical, and organizational measures designed to protect information, including authentication, access control, transport encryption for network traffic to our services, and least-privilege practices for staff tools.

Encryption in transit protects data between your client and Novend cloud services. Encrypted portable backups protect exported archives with a password. Local operational storage on the device is protected by device and browser security controls rather than application-level field encryption of every IndexedDB record.

No method of transmission or storage is perfectly secure. You should use strong passwords, enable inactivity locking on shared tills, limit admin access, keep clients updated from official download channels (including the Android app), and report suspected unauthorized access promptly.

Organization owners and administrators can manage users, branches, products, and many operational records inside the app.

Depending on applicable law, you may have rights to access, correct, delete, or restrict certain personal data, or to object to certain processing. Contact us to exercise these rights. We may need to verify your identity and role (for example, organization owner) before acting on requests that affect business data.

You may unsubscribe from non-essential marketing emails where offered; service and billing notices may still be sent.

Novend is a business product and is not directed to children. We do not knowingly create accounts for individuals under 18 for the purpose of operating a Novend organization.

We may update this Privacy Policy as Novend evolves. Material changes will be reflected on this page with an updated effective date. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy where permitted by law.

Significant changes may also be communicated through the product or email when appropriate.