Privacy Policy

SaleSprint is a business operating system — point of sale, stock, purchasing, payroll and accounting — built and run by Spalce Technologies Ltd. This policy explains what we hold, who else receives any of it, how long we keep it and how to have it removed. It covers the salesprint.org website, the SaleSprint apps for Android, iOS, Windows, macOS and the web, the online storefronts we host for our customers, and our own administration console.

Spalce Technologies Ltd is the controller of the data we hold about you as a SaleSprint user: your name and contact details, your login, the devices you sign in from, your messages to us, and your subscription and its invoices.

We are not the controller of the records inside a customer's workspace. When a shop enters your details as its customer, or a business records its employee's pay, that business decides what is collected and why; we hold and process it on their instructions and nothing more. If you are the customer or the employee of a business that uses SaleSprint, ask that business first — section 8 explains what we can do if they do not respond.

Read this alongside our Terms of Service. If you do not agree with it, please do not use the Platform.

What we hold falls into four groups, plus what the apps ask your device for. Only the first is about you as an individual SaleSprint user; the second is your business's own records.

Your account

Your name, email address, phone number, the business you belong to, your role in it, and your password — which is stored only as a salted hash, never in a form anyone can read. We also keep a record of the devices you have signed in from, and whatever you write to us in a support message or the chat on our website. We collect this when you sign up, when your employer creates your user, or when you contact us.

The records you keep in SaleSprint

Everything your workspace holds: products, prices and stock; customers and suppliers and their contact details; employees and their pay; sales, purchases, invoices, payments and the accounting entries behind them; and the images, logos, attachments, receipt photographs and import files you upload. Where you use SaleSprint as an employee, this is your employer's data — they decide what goes into it and what comes out.

Technical data

What our servers record when an app or the website talks to them: IP address, browser or app version, operating system, timestamps, the pages or screens requested, and an identifier the app generates for itself on first run so it can be recognised across sessions — it is created by the app, not read from your hardware. We also keep security and audit logs of who did what inside a workspace.

Payment data

Card and mobile-money details are entered on the payment gateway's own hosted page, not on ours: no card number ever passes through SaleSprint and we never store one. What we hold is what the gateway tells us afterwards — the amount, the currency, a reference, the status and a masked description of the instrument used. Separately, we hold the invoices and receipts we issue you for your own SaleSprint subscription.

What the apps ask your device for

The apps request these only when you use the feature that needs them, and you can refuse any of them and carry on using everything else.

• Location, precise and approximate — To set the coordinates of a branch or warehouse when you create or edit one. It is not used to follow staff around, and nothing collects location in the background.
• Camera — To scan product barcodes and to photograph receipts.
• Photo library — To let you choose a logo or an image to upload.
• Face ID, fingerprint and other biometrics — To unlock the app without retyping your password. The comparison is done by your device's operating system, which tells the app only yes or no; your face or fingerprint never leaves the device and never reaches us.
• Local network access — To reach a SaleSprint server running on the same network as your device.
• Notifications — To deliver the alerts you have asked for — a low-stock warning, an approval waiting on you, a shift about to close. Section 4 names the service that carries them.
• Storage on the device itself — SaleSprint keeps working when the connection does not, so the app stores a copy of the records you use in a local database on the device, and keeps your session token in the operating system's secure storage. Signing out or uninstalling clears both.

The apps contain no advertising SDK, no analytics SDK and no crash-reporting SDK.

We use what we hold to run the product you are paying for, and for nothing else. Specifically, to:

• Create and run your account, your workspace and your users' access to it.
• Provide the features you use — recording sales, valuing stock, posting accounting entries, and producing invoices, statements and reports.
• Take payments and issue refunds, and bill you for your own SaleSprint subscription.
• Send the messages you and the product ask for: receipts and invoices to your customers, alerts and approvals to your staff, and service notices to you.
• Keep the service secure and available — signing you in, limiting abuse, investigating fraud, taking backups and keeping audit logs.
• Answer your support requests, including through the live chat on this website.
• Meet legal obligations, including tax, accounting and fiscalisation requirements.
• Improve the product using aggregated, anonymised counts and totals that cannot be traced back to you or your business.
• Tell you about changes to the service, to our terms or to this policy.

We do not sell your data and we do not share it with advertising networks — there are none in any of our products. Data leaves us only in the situations below, and the lists that follow name every service that actually receives any of it.

By law or to protect rights

If we believe releasing information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property and safety of others, we may share it as permitted or required by any applicable law, rule or regulation.

Services every workspace uses

These are part of how SaleSprint works, so they apply to every workspace.

• Firebase Cloud Messaging (Google)

  The push token of each device you sign in on, the identifier the app generated for that device, the platform and app version, and the contents of the notification itself.

  It is how a push notification reaches your phone, tablet or desktop. On Apple devices Firebase hands the message to Apple's Push Notification service for the final step. We use no other Firebase service — no analytics, no crash reporting.

• notify.spalce.net — Spalce Technologies' own notification gateway

  The recipient's name and email address or phone number, the subject and body of the message, and any document attached to it, such as an invoice, a statement or a report.

  It is the single gateway all our email, SMS and WhatsApp messages pass through, and we operate it ourselves — it is not a third-party messaging service. For the final leg the gateway hands a message to an email or telecoms carrier, which receives only what it needs to deliver that message; which carrier is used depends on the destination network.

• Google Play (Android) and our own update feed (Windows and macOS)

  On Android, the request Google Play itself handles to install a newer version of the app. On Windows and macOS, a request to an update feed we host.

  To offer you an app update without making you leave the app. The desktop feed is ours, so nothing about you goes to a third party for it.

• Our hosting and storage — a PostgreSQL database, a Redis cache, a Redpanda event stream and object storage over the S3 API (RustFS)

  Everything in section 2, at rest: the records themselves, and separately the uploaded media, logos, attachments, receipt photographs, generated PDFs and spreadsheets, and files staged for import.

  It is where the service runs and where your data is stored and backed up. Section 5 covers where that is.

Services used only when your workspace turns them on

None of these receives anything unless an administrator of your workspace configures it. Where a service needs credentials, we hold them encrypted.

• Paystack

  The amount, currency and reference of a payment, and the payer's name, email address or phone number where you supply them.

  To take a card or mobile-money payment. Checkout is a redirect to Paystack's own hosted page: card details are entered there and never pass through SaleSprint.

• Hubtel

  The amount, currency and reference of a payment, and the payer's name, email address or phone number where you supply them.

  The same, for workspaces that take payment through Hubtel.

• PaySwitch (theTeller)

  The amount, currency and reference of a payment, and the payer's name, email address or phone number where you supply them.

  The same, for workspaces that take payment through PaySwitch.

• WhatsApp, through a GOWA bridge

  The WhatsApp number you connect, the numbers you exchange messages with, and the content of those messages in both directions.

  To run a WhatsApp inbox inside SaleSprint. The messages travel over WhatsApp itself, so WhatsApp and Meta handle them exactly as they handle any other WhatsApp message.

• Ghana Revenue Authority — E-VAT / CIS fiscalisation

  The complete fiscal invoice: line items, quantities, amounts and taxes, together with the customer identification and TIN fields on it.

  Fiscalisation is a legal requirement for the businesses it applies to, not a feature anyone chose. Only workspaces that have enabled it send anything.

• Sign-in providers you configure — Google, Microsoft, Facebook, GitHub, Twitter/X, or any OpenID Connect provider

  The sign-in request, and the profile fields the provider returns to us — typically a name and an email address.

  So your staff can sign in with an account they already have instead of another password. Set up per workspace by an administrator; nothing is sent unless one does.

• exchangerate-api (open.er-api.com)

  A three-letter currency code. No personal data, and nothing identifying you or your business.

  To fetch daily exchange rates for workspaces that trade in more than one currency. Off unless enabled.

On this marketing website only

These load on salesprint.org, the site you are reading now. They are not in the apps, the storefronts or the console.

• Tawk.to live chat

  Your IP address, your browser's user agent, the address of the page you are on, and anything you type into the chat window.

  It is the chat widget in the corner of this site. It loads on every page whether or not you open it, and it sets its own cookies — see section 6.

• Unsplash (images.unsplash.com)

  Your IP address, your browser's user agent, and the address of the page that referenced the image.

  Some photographs on this site are loaded straight from Unsplash rather than copied onto our servers, so your browser fetches them from Unsplash directly.

Two things are worth saying because people reasonably assume otherwise. The typefaces this site uses are downloaded from Google when the site is built and then served from our own domain, so your browser never contacts Google for a font. And there is no analytics, no tag manager, no advertising pixel and no CAPTCHA anywhere on this site, in the apps, in the storefronts or in the console.

Some of the services named in section 4 are operated outside Ghana, so using them means data reaches other countries. Firebase Cloud Messaging is operated by Google; Tawk.to and Unsplash are operated by their own companies abroad; and the payment gateways and sign-in providers a workspace may configure operate in their own jurisdictions. What each one receives is exactly what section 4 lists — none of them receives your accounting records.

Our own databases, file storage and backups are hosted in the European Union and the United States. Wherever you use SaleSprint from, your workspace's records are held in one or both of those regions, which means they leave Ghana. We do not hold a copy anywhere else.

The basis on which a particular transfer is made is available on request: write to us at the address in the last section, tell us which transfer concerns you, and we will tell you what is sent, to whom and where.

The four things we run behave differently here, so this section is split by property. The short version: none of them tracks you for advertising, and there is no analytics or tag manager in any of them.

We do not advertise to you, we do not build profiles for advertising, and we do not sell or share data with data brokers or advertising networks.

Most browsers accept cookies by default and let you remove or refuse them. Refusing them will stop this website's chat widget and a storefront's basket from working; nothing else we run depends on one.

We use administrative, technical and physical measures to protect your information: traffic is encrypted in transit, passwords are stored only as salted hashes, the credentials a workspace gives us for a payment gateway are encrypted at rest, and every action inside a workspace is recorded in an audit log. While we have taken reasonable steps to secure the information you give us, please be aware that no security measure is perfect or impenetrable and no method of transmission can be guaranteed against interception or misuse.

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it — including closing your account entirely. There is a dedicated page that explains exactly what a deletion removes, what we are legally required to keep, and how long each takes, and it carries the request form:

Account & Data Deletion →

Verified requests are completed within 30 days. Backups holding the deleted data expire within 90 days. Posted accounting entries and tax records are retained for the statutory period, typically six years, because tax law requires both of us to keep them; they are deleted at the end of it. Everything else — logins, staff accounts, customer and supplier contact details, uploaded media and message history — is deleted permanently.

Three ways to ask

• In the app: Settings → Account & data deletion. Every signed-in user can reach it, for their own staff record as well as for the workspace.
• On this website: the Account & Data Deletion page linked above. No sign-in needed — you confirm the request with a code we email you, and until you do it reaches nobody and does nothing.
• By email: write to [email protected] from the address on the account.

Where you use SaleSprint as an employee, your employer is the controller of that data and we act on their instructions. Direct your request to them first; we will help you reach them if they do not respond.

SaleSprint is a product for businesses. It is not directed at children, it is listed in the app stores for a general business audience, and we do not knowingly collect personal information from a child under the age of 13 in the course of providing it. If a workspace's own records happen to include information about a child — a customer, or a family member named on an employee's record — that information belongs to the business that entered it and that business decides what is collected. If you believe we hold information collected directly from a child under 13, contact us using the details below and we will remove it.

Most browsers offer a Do-Not-Track ("DNT") setting, and some now send a Global Privacy Control signal. No uniform standard for honouring them has been settled, and we do not act on them — but there is nothing on our side for them to switch off: we run no behavioural tracking, no analytics and no advertising in any of our products, as section 6 sets out. The only third-party script anywhere is this website's chat widget, and blocking it in your browser is enough to stop it loading.

If you have questions or comments about this Privacy Policy, or want to exercise one of the rights in section 8, please contact us at: