MySaleGen is operated by Sage Analytix ("we", "us"). This policy explains what data we collect when you use MySaleGen, why we collect it, and what choices you have. It applies to the MySaleGen point-of-sale web app, our marketing website, and any related services.
1. What we collect
To run your store on MySaleGen we collect three categories of data:
- Account data — owner name, business name, email, phone number, username, and a hashed copy of your password. You provide all of this at signup.
- Operational data — products, inventory levels, sales, returns, restocks, expenses, and staff accounts you create. This is the data that makes the POS useful to you.
- Payment data — the last four digits of your card, card brand, and authorization codes returned by Paystack. We do not store full card numbers or CVCs. Paystack does.
We also collect routine technical data — IP address, browser type, device identifier — in our server logs for security and debugging. We do not run any third-party analytics or advertising trackers on the app.
2. How we use it
- Provide and operate MySaleGen (let you sign in, sync between devices, etc.).
- Bill you for the subscription you signed up for.
- Send transactional emails — verification codes, receipts, billing notices.
- Detect and prevent abuse, fraud, and unauthorized access (rate limiting, audit logs, suspicious-activity reviews).
- Respond when you contact us for help.
We do not sell your data. We do not share your data with advertisers. We do not use your store data to train models.
3. Third parties we share data with
We use a small number of vendors to run MySaleGen. Each only sees what they need to do their job:
- Paystack — processes card payments and stores card tokens. Your full card details go to Paystack, never to us.
- Brevo — sends transactional email (signup verification codes, receipts, billing reminders).
- MongoDB Atlas — hosts the cloud database where your synced data lives.
- Vercel — hosts the MySaleGen web application.
Some of these vendors process data outside Nigeria. We rely on their published security and contractual safeguards. We will publish updates here if we add or remove any of them.
4. Cookies and local storage
We use a small number of strictly necessary cookies and browser storage entries:
- Authentication cookies (HttpOnly, SameSite=Lax) — keep you signed in between page loads. These are issued by us; they are not shared with third parties.
- Local database (IndexedDB) — caches your products, stock, and queued sales so the POS works offline.
- localStorage — remembers your device ID, store ID, and a cached copy of your profile so the app loads quickly on reopen.
We do not use third-party advertising or analytics cookies.
5. Data retention
We retain your account and store data for as long as your subscription is active. After cancellation:
- Your data stays available for 90 days in case you change your mind.
- After that, your store data is deleted from production. Backups containing it are overwritten within a further 90 days.
- We may keep a minimal record of account ownership and billing history for tax and accounting purposes for up to 7 years, as required by Nigerian law.
6. Your rights
Under the Nigeria Data Protection Regulation (NDPR), you can:
- Ask what data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete your account and data.
- Ask for a copy of your data in a portable format.
- Withdraw consent for anything you previously agreed to.
Email analytixsage@gmail.com and we will action your request within 30 days.
7. Security
We protect data in transit with HTTPS and at rest with database encryption. Passwords are hashed with bcrypt — we cannot read them, and a database leak would not expose them in plain text. Each device gets a unique device ID and a JWT-bound cookie; revoking a session is one click away.
No system is perfectly secure. If we discover a breach that affects your data, we will notify you within 72 hours of confirming it and tell you what data was involved and what we're doing about it.
8. Children
MySaleGen is not intended for use by anyone under 18. We do not knowingly collect data from children. If you believe a minor has signed up, contact us and we will delete the account.
9. Changes to this policy
When we make material changes, we will email account owners and update the "Last updated" date at the top of this page. Continuing to use MySaleGen after a change means you accept the new version.
10. Contact
Privacy questions, data requests, or breach reports: analytixsage@gmail.com.