Privacy Policy

1. Who we are

Vyser is operated by Paryar Technologies Limited, based in Kumasi, Ghana. In this policy, “Paryar”, “we” and “us” mean Paryar Technologies Limited.

For the personal data of our users (the shop owners and staff who create Vyser accounts), we are the data controller. For information that a merchant records about their own customers, such as customer names, phone numbers and debts, the merchant decides what is collected and why, and we process that information on the merchant’s behalf to provide the Service.

2. Information we collect

Account information

• Full name, email address and WhatsApp or phone number.
• Business name, business type and business location.
• Login credentials. Passwords are handled by our authentication provider and stored in protected (hashed) form. We cannot read them.

Business records you enter

• Products, prices, stock quantities, stock costs and product images.
• Sales, discounts and the payment method recorded for each sale.
• Customer names and phone numbers recorded for debts, and the repayments made.
• Invoices, receipts and proforma invoices you generate.
• Cash-out entries, shop opening hours, activity logs and in-app notifications.

Staff information

• If you use Staff Mode: staff names and login details created by the merchant, the sales and actions attributed to each staff member, and an identifier of the device a staff member logs in from, which is used to bind a staff account to a device.

Subscription and payment information

• Your chosen plan, billing period, start and end dates, and the payment status and reference number returned by Paystack.
• Payments are processed by Paystack. We do not receive or store your card numbers, mobile money PINs or other payment credentials.

Technical information

• A push-notification token for your device (Firebase Cloud Messaging), the app version, and basic diagnostic information needed to keep the Service working.

Website and support

• When you choose a plan on our website, we ask for your email address to start the payment.
• If you contact us by email or WhatsApp, we receive the details you choose to share.

3. How we use your information

We use your information to:

• Provide and operate Vyser: recording sales, managing stock and debts, producing reports and invoices, running Staff Mode, and syncing your records between your devices.
• Create and manage your account and verify staff logins.
• Process subscription payments, confirm your plan status, and send reminders before your trial or plan ends.
• Send push notifications you would expect from the app, such as sales, debt payments, product changes, low-stock alerts, voided transactions and subscription reminders.
• Provide support and reply to your messages.
• Keep the Service secure, prevent misuse and enforce our Terms of Service.
• Find and fix faults and improve reliability.
• Meet our legal obligations.

We process personal data where it is necessary to provide the Service you signed up for, where you have given consent, where we have a legitimate interest in running and securing the Service, or where the law requires it. We handle personal data in line with Ghana’s Data Protection Act, 2012 (Act 843).

We do not sell your personal data, and we do not use it for third-party advertising.

4. Offline use and where your data is stored

Vyser is built to keep working without an internet connection. Your business records are saved first in a database on your own device and are synced to our secure cloud servers when you are online. This means:

• Records created offline exist only on your device until the next successful sync. Keep the app installed and sync before you change, reset or lose a device.
• You are responsible for the security of your device, including using a screen lock.

Cloud data is stored with our infrastructure providers: Supabase (database and file storage), Google Firebase (push notifications) and Vercel (hosting for our website and merchant storefronts). These providers may process data on servers outside Ghana. We use providers that apply recognised security standards, and we share only what each one needs to perform its service.

5. Who can see your data

• You, the merchant: everything in your account.
• Your staff: only what their role allows. Staff sessions also have extra protections, such as screenshot blocking.
• The public: if you publish an online storefront, the product names, prices, images and shop details you choose to publish are visible to anyone with your storefront link.
• Our service providers (Supabase, Google Firebase, Vercel and Paystack): only to the extent needed to run their part of the Service.
• Authorities: where required by law, a court order, or to protect rights and safety.

We never give one merchant access to another merchant’s records.

6. How we protect your data

• Data is encrypted in transit using HTTPS/TLS, and our infrastructure providers encrypt stored data.
• Row-level access controls on our servers make sure each account can only reach its own records. This is enforced on the server, not only in the app.
• Staff permissions are enforced by role.
• Payment secrets and server keys are kept on our servers and are never placed inside the app.
• Passwords are stored in hashed form.
• Access to our internal admin tools is limited and requires sign-in.

No system is completely secure. If a security incident affects your personal data, we will tell you and the relevant authority as required by law.

7. How long we keep your data

We keep your data while your account is active and as long as needed to provide the Service. If a trial or plan expires, your data is kept so you can renew and carry on where you stopped.

When you delete your account in the app, your personal data and business records are deleted immediately. If you ask us to delete it by email instead, we complete the deletion within 30 days. The exception is records we must keep by law: we keep subscription payment references, without your name, email or account ID, for as long as Ghanaian tax and accounting law requires. Copies held in backups are removed as those backups are rotated.

8. Your rights

Under Ghana’s Data Protection Act, 2012 (Act 843) you may:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct data that is inaccurate. Much of it can be edited directly in the app.
• Ask us to delete your data or your account.
• Object to, or ask us to limit, certain uses of your data.
• Withdraw your consent where we rely on it.

To use any of these rights, email us at victoroforiboamah@gmail.com from the address on your account. We may need to confirm your identity first, and we aim to reply within 30 days. You may also complain to the Data Protection Commission of Ghana.

If you are a customer whose details were recorded by a shop that uses Vyser, please contact that shop first. You can also write to us and we will help.

9. Deleting your account

You can delete your account yourself in the app: open Settings, scroll to Danger Zone, tap Delete Account, then type DELETE and enter your password. The deletion happens immediately.

If you cannot open the app, email victoroforiboamah@gmail.com from your registered email address with the subject “Delete my account”, and we will complete the deletion within 30 days.

Full details, including what is deleted and what we keep, are on our Delete Account page, linked in the footer below.

10. Children

Vyser is a business tool for adults. It is not directed at anyone under 18, and we do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. The latest version is always on this page with its “last updated” date. For significant changes we will also tell you in the app or by email.

12. Contact us

Questions about this policy or your data? Email victoroforiboamah@gmail.com. Paryar Technologies Limited, Kumasi, Ghana.