1. Who we are

Mentorworld POS is a point-of-sale service operated by Mentorworld Synergy Ltd (“we”, “us”), a company in Nigeria. This policy explains what information the Mentorworld POS Android app, the Mentorworld POS Windows app and the website cloud.mentorworldpos.com (together, “the Service”) collect, why, and the choices you have.

The Service is used by businesses (“subscribers”) and their staff. A business that subscribes decides what information it records about its own customers, suppliers and products. For that business data, the subscribing business is the data controller and we process it on its behalf. For the account details of people who use the Service, and for running the Service itself, we are the data controller.

We handle personal data in line with the Nigeria Data Protection Act 2023 and other laws that apply.

2. Information we collect

Account information

When a business owner or administrator creates a user account: name, username, email address, phone number (if given), password (stored only as a secure hash), role and the shops the user may access.

Business information you enter

The information your business records while using the Service, for example:

• Products, prices, stock levels, expiry dates, purchases and stock adjustments.
• Sales, receipts, payment methods and amounts.
• Customer and supplier details, such as name, phone number and amounts owed.
• Business name, shop addresses and receipt details.

Every sale and stock change is stored with the name of the user who made it and the time.

Information on your device

• Sign-in token: after you sign in, the app keeps a sign-in token on your device so you stay signed in. On Android it is kept in the phone’s secure storage; on Windows it is encrypted by Windows.
• Offline copy: the app keeps a copy of your products and prices, recent customers you picked and sales made without internet, so you can keep selling offline. Offline sales are sent to the server when the connection returns.
• Settings: your printer choice, paper size and similar preferences.

Technical information

Our server records standard technical data needed to run and secure the Service, such as the time of each request, your IP address and error logs.

What we do not collect

• We do not collect your location.
• We do not read your contacts, photos, messages or files.
• We do not show advertising and do not use advertising or tracking tools.
• We do not sell personal data.

3. App permissions

On phones with Google Play services, barcode scanning can use Google’s scanner, which reads the barcode on the device. See Google’s privacy policy.

4. How we use information

• To provide the Service: sign-in, checkout, receipts, sales history, stock and reports.
• To keep your business data in your account and show it on the web dashboard and in the apps.
• To keep the Service secure, prevent misuse and fix problems.
• To manage subscriptions and contact business owners about their account or important changes.
• To meet legal obligations.

We use business data only to provide the Service to the business that entered it.

5. Sharing

We do not sell or rent personal data. We share information only:

• Within your business account: users of a business can see that business’s data, limited by the shops and permissions their role allows.
• With service providers who help us run the Service, such as our hosting provider, under confidentiality and security obligations.
• When you choose to share, for example sending a receipt by WhatsApp, SMS or email.
• When required by law or to protect the rights, safety and security of our users or the Service.

6. Security

Information travels between the apps and our server over encrypted connections (HTTPS). Passwords are stored as secure hashes. Sign-in tokens on devices are kept in secure storage. Access to business data is limited by user roles and shop permissions. No system is completely secure, but we work to protect your information and fix weaknesses quickly.

7. How long we keep information

We keep business data for as long as the business’s account is active, so that its sales history and reports remain available. When a subscription ends, the business can ask us to delete its data. We may keep some records for longer where the law requires it, for example for tax or accounting purposes. Data stored on a device is removed when you sign out of the app (sales not yet uploaded are kept until they are sent) or uninstall it.

8. Your rights and deleting your data

You may ask to access, correct or delete your personal data, object to or restrict its use, or receive a copy of it. You can also complain to the Nigeria Data Protection Commission.

• Staff accounts: your business administrator can edit or delete your user account in the web dashboard. You can also ask us directly.
• Deleting an account and its data: email or message us using the contacts below with your username and business name. We will confirm the request with the business owner and complete it within 30 days.
• Customers and suppliers of a business: please contact that business first, as it controls the records about you. We will help it respond.

9. Children

The Service is for businesses and their staff. It is not intended for children under 18, and we do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy from time to time. We will change the effective date above and, for important changes, let business owners know through the Service or by email.

11. Contact us

Mentorworld Synergy Ltd
Phone / WhatsApp: +234 708 182 8311
Email: onne4u@gmail.com
Address: [COMPANY ADDRESS]
Website: cloud.mentorworldpos.com