Privacy Policy

This policy explains what information the Baigamats Business Management app and website (the "Service") handles, why, and the choices you have. The Service is used by businesses and institutions in Uganda to record sales, stock, customers, payments and related business activity.

Who is responsible

The business or institution that gives you a login (your employer or organisation) decides what is recorded about its customers and staff, and is responsible for that data. Baigamats provides the software and processes the data on that organisation's behalf. Questions about this policy can be sent to the support contact shown on business.baigamats.com.

Information we handle

• Account details: your name, login identifier (such as a phone number or email address), role and the organisation you belong to.
• Business records you or your organisation enter: sales and receipts, products and stock, customers (name, phone number, address if entered), suppliers, staff records, loans and repayments, invoices and reports.
• Payment information: the mobile money phone number, network, amount, reference numbers and status of payments made or requested through the Service. We do not store mobile money PINs, and we do not store full card numbers.
• Technical information: device and browser type, app version, error logs and sign-in activity, used to keep the Service secure and working.

Device permissions

• Camera: used only when you choose to scan a product barcode. Images are processed on your device to read the code and are not saved or uploaded.
• Bluetooth (and the related location permission Android requires for it): used to find and connect to your receipt printer. We do not collect or store your location.
• Internet: required to use the Service.

How we use information

• to run the Service: record sales, issue receipts, process payments and show reports;
• to confirm and reconcile payments with payment providers;
• to send receipts, reminders and notifications by SMS, WhatsApp or email when your organisation chooses to;
• to keep the Service secure, prevent fraud, fix errors and meet legal obligations.

We do not sell personal information and we do not show advertising.

Who it is shared with

Only as needed to provide the Service:

• Hosting and database providers (for example Vercel and Supabase) that store and serve the data;
• Payment providers (for example Yo! Payments, Gypaid and Pesapal) that process mobile money, card and bank payments. They receive the payer's phone number, amount and a description;
• Messaging providers that deliver SMS or WhatsApp messages your organisation sends;
• Authorities, where the law requires it (for example tax authority e-invoicing).

Security

Data travels over encrypted connections (HTTPS). Access is limited by login, role and organisation, so users only see their own organisation's records. No system is perfectly secure, but we work to protect your data and fix problems promptly.

How long we keep it

Business and financial records are kept for as long as the organisation uses the Service, and afterwards for the period needed to meet accounting, tax and audit obligations. Records can then be deleted on request, see below.

Your choices and rights

You can ask to see, correct or delete the personal information held about you. Staff should ask their organisation's administrator first, since the organisation controls its records. You can also contact us at the support contact shown on business.baigamats.com. To request deletion of an account and its data, see the account deletion page.

Children

The Service is for business use by adults. It is not directed at children under 18, and we do not knowingly collect their information.

Changes

If we change this policy we will update the date at the top. Material changes will also be announced in the Service.

Contact

Questions or requests: the support contact shown on business.baigamats.com.