Privacy Policy

1. Information We Collect

We collect only the information necessary to provide you with a fast, reliable retail POS system:

• Account Details: Mobile phone number for passwordless WhatsApp login verification, business name, and store address.
• Catalog & Store Data: Product names, prices, SKU codes, categories, and inventory quantities entered by you.
• Transaction Records: Sale receipts, payment methods (cash, card, bank transfer, debtor credit), order timestamps, and debtor records.
• Technical Diagnostics: IP address, device type, browser platform, and anonymous error logs used to maintain offline sync reliability.

2. Offline-First Storage & Data Ownership

Dibiflow operates on an offline-first architecture. Your catalog and sales records are stored locally in your browser database (IndexedDB). When your device is connected to the internet, your records synchronize securely with our encrypted cloud servers. You retain complete ownership of your business inventory and customer records at all times.

3. How We Use Your Data

We use your information exclusively to:

• Process register sales, print receipts, and decrement stock counts.
• Send one-time WhatsApp verification codes for authentication.
• Generate daily sales, expense, and net profit summaries for your business.
• Deliver customer WhatsApp digital receipts upon your explicit checkout action.
• Maintain server uptime, offline sync, and security protections.

4. Zero Sale of Personal Data

We do not sell, rent, or monetize your personal data or your customers' transaction data. We never share your sales numbers or customer contact lists with third-party advertisers. We share information only with trusted infrastructure providers (such as cloud hosting and WhatsApp delivery partners) strictly required to operate the service.

5. Global Data Protection Compliance

Dibiflow adheres to global data privacy standards, including the Nigeria Data Protection Act (NDPA), General Data Protection Regulation (GDPR), and relevant international data protection laws. You have the right to request access to your data, correct inaccuracies, export your complete catalog and transaction history in CSV format, or request full deletion of your account.

6. Data Security

We implement industry-standard encryption protocols (TLS 1.3 in transit and AES-256 at rest) to protect your account. While no internet-connected platform can guarantee absolute immunity, we continuously monitor our infrastructure to prevent unauthorized access.

7. Contact Privacy Team

For any questions regarding this Privacy Policy or to exercise your data privacy rights, please reach out to our team: