PRIVACY POLICY

1. Introduction

Welcome to Fisco's Privacy Policy. This policy describes how we collect, use, store, and protect your personal information when you use our business operations management platform.

Effective Date: November 5, 2025
Last Updated: November 5, 2025

1.1 Our Commitment

We are committed to protecting your privacy and handling your data transparently and securely. This policy explains your rights and our responsibilities.

1.2 Scope

This policy applies to all users of Fisco, including:

• Business owners and operators
• Employees and team members
• Customers whose information is stored in the platform
• Website visitors

1.3 Acceptance

By using Fisco, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

Account Information

• Full name
• Email address
• Phone number
• Password (encrypted)
• Business name and details
• Business address
• Tax identification numbers
• Payment information (processed by third-party payment processors)

Business Data

• Customer information (names, contact details, purchase history)
• Product and inventory data
• Sales transactions and receipts
• Order details
• Invoice information
• Financial records
• User-generated content (notes, descriptions, etc.)

Communications

• Support tickets and correspondence
• Feedback and survey responses
• Email communications with us

2.2 Information Collected Automatically

Usage Data

• IP address
• Browser type and version
• Device information (type, operating system)
• Pages viewed and features used
• Time and date of access
• Referral URLs
• Session duration

Technical Data

• Log files and error reports
• API usage patterns
• Performance metrics
• Cookie and tracking data

Location Data

• General location based on IP address
• Precise location (only if you grant permission for location-based features)

2.3 Information from Third Parties

• Payment processing information from payment providers
• Business verification data from third-party services
• Integration data from connected services (with your permission)
• Public business information from business directories

3. How We Use Your Information

3.1 Service Provision

• Create and manage your account
• Process transactions and payments
• Provide customer support
• Send service-related notifications
• Enable platform features and functionality

3.2 Service Improvement

• Analyze usage patterns and trends
• Develop new features and services
• Improve user experience and performance
• Conduct research and analytics
• Troubleshoot technical issues

3.3 Communication

• Send account updates and security alerts
• Provide customer support responses
• Send marketing communications (with consent)
• Notify you of changes to our services
• Conduct surveys and gather feedback

3.4 Security and Compliance

• Detect and prevent fraud
• Enforce our Terms of Service
• Comply with legal obligations
• Protect our rights and property
• Ensure platform security

3.5 Legal Bases (GDPR)

We process your data based on:

• Consent: When you've given explicit permission
• Contract: To fulfill our agreement with you
• Legitimate Interest: For business operations and improvement
• Legal Obligation: To comply with laws and regulations

4. How We Share Your Information

4.1 We DO NOT Sell Your Data

We never sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 Service Providers

We share data with trusted third-party service providers who help us operate Fisco:

• Cloud Hosting: AWS, MongoDB Atlas (data storage and processing)
• Payment Processing: Stripe, PayPal (payment transactions)
• Email Services: SendGrid, AWS SES (transactional emails)
• Analytics: Google Analytics (usage analytics)
• Customer Support: Intercom, Zendesk (support tools)

These providers are contractually obligated to protect your data and use it only for specified purposes.

4.3 Business Transfers

If Fisco is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4.4 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations (subpoenas, court orders)
• Enforce our Terms of Service
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Respond to government requests

4.5 With Your Consent

We may share your information with other parties when you explicitly consent or direct us to do so.

4.6 Aggregated Data

We may share aggregated, anonymized data that cannot identify you personally for research, marketing, or analytics purposes.

5. Data Security

5.1 Security Measures

We implement industry-standard security measures:

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Access Controls: Role-based access and multi-factor authentication
• Network Security: Firewalls, intrusion detection, and monitoring
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Security awareness and data protection training

5.2 Your Responsibilities

• Keep your password secure and confidential
• Use strong, unique passwords
• Enable two-factor authentication when available
• Report suspicious activity immediately
• Log out from shared devices

5.3 Limitations

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You use the Service at your own risk.

6. Data Retention

6.1 Active Accounts

We retain your data while your account is active and for as long as needed to provide services.

6.2 Inactive Accounts

• Accounts inactive for 12+ months may be deleted
• We will notify you before deletion
• You can export your data before deletion

6.3 After Termination

• We retain data for 30 days after account closure
• Some data may be retained longer for legal or accounting purposes
• Backup copies may exist temporarily in our systems

6.4 Legal Retention

We may retain certain data longer when required by:

• Legal obligations
• Tax and accounting requirements
• Dispute resolution
• Fraud prevention

7. Your Privacy Rights

7.1 Access and Portability

• Request a copy of your personal data
• Export your business data in common formats (CSV, JSON)
• Receive data in a structured, machine-readable format

7.2 Correction

• Update your account information at any time
• Request correction of inaccurate data
• Contact support for assistance

7.3 Deletion

• Delete your account through account settings
• Request deletion of specific data
• Right to erasure (subject to legal exceptions)

7.4 Restriction

• Request limitation of data processing
• Object to certain types of processing
• Opt-out of marketing communications

7.5 Objection

• Object to processing based on legitimate interests
• Opt-out of automated decision-making
• Withdraw consent at any time

7.6 Exercising Your Rights

To exercise these rights, contact us at privacy@Fisco-project.com. We will respond within 30 days.

8. Cookies and Tracking Technologies

8.1 What We Use

• Essential Cookies: Required for platform functionality
• Performance Cookies: Analytics and usage tracking
• Functional Cookies: Remember your preferences
• Marketing Cookies: Deliver relevant advertisements (with consent)

8.2 Your Choices

• Manage cookie preferences in your browser
• Opt-out of analytics tracking
• Disable non-essential cookies
• Note: Disabling essential cookies may impair functionality

8.3 Third-Party Tracking

• Google Analytics (usage analytics)
• Social media plugins (if integrated)
• Advertising networks (with consent)

9. International Data Transfers

9.1 Data Location

Your data may be stored and processed in multiple countries where our service providers operate, including:

• United States (AWS data centers)
• European Union (MongoDB Atlas)

9.2 Transfer Safeguards

When transferring data internationally, we use:

• Standard Contractual Clauses (SCCs)
• EU-US Data Privacy Framework compliance
• Adequate protection mechanisms

9.3 Your Rights

You have rights regarding international transfers. Contact us for more information.

10. Children's Privacy

Fisco is not intended for users under 18. We do not knowingly collect information from children. If you believe we have collected data from a child, contact us immediately for deletion.

11. Regional Privacy Rights

11.1 European Union (GDPR)

If you're in the EU, you have additional rights:

• Right to lodge complaints with supervisory authorities
• Right to data portability
• Enhanced consent requirements

11.2 California (CCPA/CPRA)

California residents have rights to:

• Know what personal information is collected
• Delete personal information
• Opt-out of data sales (we don't sell data)
• Non-discrimination for exercising rights

11.3 Other Jurisdictions

We comply with applicable privacy laws in your jurisdiction. Contact us for specific information.

12. Do Not Track Signals

We currently do not respond to Do Not Track (DNT) browser signals. We will update this policy if our practices change.

13. Third-Party Services

13.1 Integrated Services

Fisco may integrate with third-party services you connect:

• Accounting software (QuickBooks, Xero)
• E-commerce platforms (Shopify, WooCommerce)
• Payment processors (Stripe, PayPal)

13.2 Third-Party Policies

These services have their own privacy policies. We are not responsible for their practices. Review their policies before connecting.

14. Business Customer Data

14.1 Your Customers' Information

When you use Fisco to store customer information, you are the data controller and we are the data processor.

14.2 Your Responsibilities

• Obtain necessary consents from your customers
• Comply with privacy laws in your jurisdiction
• Inform your customers about data processing
• Honor your customers' privacy rights

14.3 Our Role

• Process customer data only according to your instructions
• Implement appropriate security measures
• Assist with data subject requests
• Notify you of data breaches

15. Changes to This Policy

15.1 Updates

We may update this Privacy Policy periodically. Changes will be posted with a new "Last Updated" date.

15.2 Material Changes

For significant changes, we will:

• Email registered users
• Display prominent notice on the Service
• Require acceptance for continued use (when required by law)

15.3 Review Regularly

We encourage you to review this policy periodically to stay informed about how we protect your information.

16. Contact Us

16.1 Privacy Questions

For privacy-related questions or concerns:

• Email: legal@thecodecafe.co
• Data Protection Officer: dpo@thecodecafe.co
• **Support:**fisco@thecodecafe.co

16.2 Mailing Address

Fisco
1, Tunde Idiagbon, GRA,
Ilorin, Nigeria.

16.3 Response Time

We aim to respond to privacy inquiries within 30 days, or sooner when required by law.

Acknowledgment

By using Fisco, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and our Terms of Service.

Version: 1.0
Effective Date: November 5, 2025
Last Updated: November 5, 2025

Note: This document is a template and should be reviewed by legal counsel before implementation. Laws and regulations vary by jurisdiction, and this template may not address all applicable requirements for your specific situation.