Privacy Policy
Version 2026-11-03 · Last updated 3 November 2026 · RemicTech Digital Lab
This policy explains how RemicTech Digital Lab handles personal data in Bizora BMS, in line with Ghana's Data Protection Act, 2012 (Act 843).
1. Who is responsible
- Account holders (owners and staff who sign in): RemicTech Digital Lab is responsible for your account data.
- People a business records (its customers, staff on payroll, suppliers): the business decides what it records and is responsible for it. RemicTech Digital Lab processes that data only on the business's instructions, to provide Bizora.
2. What we store and why
| Data | Why |
|---|---|
| Name, email, phone, business details | To run your account and contact you about it |
| Password (stored only as a one-way hash) | To sign you in |
| Sign-in activity: time, device, IP address; failed sign-ins | To protect accounts and detect attacks |
| Business records: sales, stock, customers, invoices, expenses, bookings, deliveries, payroll | Because the business enters them — this is the service |
| Staff payroll details (Ghana Card, SSNIT, MoMo/bank numbers) | Entered by the employer for payroll. Encrypted and shown only partly |
| Subscription payments | Handled by Paystack. We store the amount, date and reference — never full card numbers or Mobile Money PINs |
| Record of which Terms and Privacy versions you accepted, when, and from which IP address | To show what was agreed |
3. Who we share it with
- Paystack — to take subscription payments.
- Our hosting provider — which stores the servers and backups for us under a confidentiality agreement.
- WhatsApp and Google Maps — only when you tap a WhatsApp, call or Maps button; the message or address goes from your phone to that service.
- Authorities, only when the law requires it.
We do not sell personal data and do not use it for advertising.
4. No AI training or testing on your data
RemicTech Digital Lab does not use customer or business data in Bizora to train, test or experiment with artificial intelligence, and does not copy it into AI tools or into datasets for unrelated product development. Our development and testing use made-up demo businesses only. If we ever offer an AI feature, it will be optional, explained clearly first, and will not use your data without your permission.
5. How it is protected
- Encrypted connections (HTTPS) everywhere; encrypted sessions; passwords hashed.
- Each business's records are kept separate; staff see only what their role allows; sensitive actions ask for the password again.
- Repeated wrong passwords are slowed down; changes to money, stock, staff and settings are written to an audit log the owner can read.
- Daily backups in private storage, tested every week and deleted automatically after 30 days.
6. Cookies and storage on your device
Bizora uses only essential cookies — the ones it cannot work without. It does not use analytics, advertising or tracking cookies, so there is nothing to opt in or out of.
| Name | Purpose | Kept for |
|---|---|---|
bizora-bms-session | Keeps you signed in and remembers your branch | Until you sign out or 120 minutes without activity |
XSRF-TOKEN | Security: stops other websites sending forms as you | Same as the session |
remember_web_… | Only if you tick "Keep me signed in" | Until you sign out |
The app also saves a few things on your own device (browser storage), not on our servers: light/dark mode, the till's product list and unsent sales so it can work offline. Signing out clears what belongs to your account. If we ever add optional cookies, we will ask for your consent first.
7. How long data is kept
| Data | Kept for |
|---|---|
| Active account and business records | While the account is active |
| Sales, invoices, expenses, payroll and other accounting records | As long as tax and accounting law requires — we keep them 6 years, then delete them |
| Who-changed-what (audit) history | 24 months |
| Payment reminders sent to customers | 24 months |
| Read notifications | 6 months |
| Uploaded import files | 24 hours |
| Delivery and booking links | Stop working 2 days after the delivery closes; booking links once the appointment is over |
| Expired sessions and password-reset links | Deleted when they expire |
| An account that has ended (cancelled or unpaid) | 12 months so you can return or export, then deleted (except records the law requires, as above) |
| Records of privacy requests | 36 months |
| Backups | 30 days, then automatically deleted |
8. Your rights and how to use them
You can ask to see the personal data we hold about you, get a copy, have it corrected, or have it deleted, and you can object to how it is used.
- Account holders: go to Your profile → Privacy & your data. You can download your personal data straight away, correct your details, and send a correction or deletion request.
- Customers of a business should ask that business; it can export, correct or remove your details from your customer page in Bizora. You can also contact us and we will pass your request on.
How we handle requests: we confirm who is asking, review the request, and reply within 30 days. Deletion is done unless the law requires us (or the business) to keep a record — for example sales and invoices for tax — in which case your name and contact details are removed and the record is kept without them. You may also complain to Ghana's Data Protection Commission.
9. Changes and contact
We will tell you in the app before important changes, and ask you to accept the new version at your next sign-in. Contact RemicTech Digital Lab via email remictechdesk@gmail.com or WhatsApp +233558575280.