NtomaOS — Privacy Policy

1. Information We Collect

We collect several types of information to provide and improve the service:

a. Personal Information

• Name, email address, phone number, business name and password.
• Customer records you add (customer names, contact details, measurements, preferences).

b. Business & App Data

• Orders, invoices, payment records and inventory items you add to the app.
• Photos or documents you upload related to products or customers.

c. Device & Usage Data

• Device model, operating system, app version, log data and usage metrics.
• Crash reports and performance data to help us diagnose problems.

d. Optional Permissions

When you grant permissions, we may access:

• Camera & Storage: to allow you to capture or upload photos for products and customers.
• Network/Internet: to sync your data securely to our cloud servers.

2. How We Use Your Information

We use collected information for the following purposes:

• To provide, operate and maintain the NtomaOS app and website.
• To store and sync your business data so it is available across devices.
• To generate invoices, process payments, and keep transaction records.
• To send important notifications, updates, and support messages.
• To analyze usage and improve features and performance.
• To detect, prevent and address fraud, abuse or other security issues.

We do not sell your personal data to third parties.

3. Legal Basis for Processing (where applicable)

If you are located in a jurisdiction that requires us to state the legal basis for processing (for example, the EU under the GDPR), our legal bases include:

• Processing necessary for contract performance (providing the app and its features).
• Processing based on your consent (for optional features such as camera access).
• Processing necessary for compliance with legal obligations or legitimate interests (security, fraud prevention, analytics).

4. Data Sharing & Third Parties

We may share limited information with trusted third parties only as needed to operate the service:

• Service providers: cloud hosting, database, analytics, payment processors, and email services. These providers process data on our behalf and are contractually limited from using your data for other purposes.
• Legal requests: we may disclose information when required by law or to protect our rights.

Whenever we share data with third parties, we require them to maintain appropriate safeguards for your data.

5. Data Storage & Security

Your data is stored on secure cloud servers. We use industry standard security measures including HTTPS, encryption in transit, and access controls to protect your data. However, no system is completely secure — if you believe your account has been compromised, contact us immediately.

Account deletion: If you request deletion of your account, we will permanently delete your account and associated data within 30 days unless we are required to retain certain information for legal or legitimate business reasons.

6. Payments & Financial Data

NtomaOS may integrate with third-party payment processors to record payments and invoices. We do not store full payment card information unless explicitly required and only via accredited payment providers who handle card processing and storage securely.

7. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data, including:

• Access and obtain a copy of your personal data.
• Request correction of inaccurate information.
• Request deletion of your personal data.
• Withdraw consent for processing where consent was the legal basis.

To exercise these rights, contact us at privacy@ntomaos.com. We will respond within a reasonable timeframe and in accordance with applicable law.

8. Children

NtomaOS is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child provided us with personal information, contact us to request removal.

9. International Transfers

Your data may be processed and stored in servers located outside your country. When this happens we ensure there are appropriate safeguards in place (contracts, standard data protection clauses) to protect your information.

10. Cookies & Tracking

We use cookies and similar technologies on our website to improve user experience and gather analytics. You can control cookie preferences via your browser settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy here with an updated "Last updated" date. Continued use of the service after changes means you accept the updated policy.