Privacy Policy

Last updated: 10 October 2026

This policy explains what personal data Fosh Digital Solutions (“Fosh”, “we”) collects through the Fosh Receivable Center app and website, why, and what your rights are. We handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA).

1. Data we collect

• Account data: your email address and sign-in details (passwords are stored in hashed form by our authentication provider).
• Your Data: invoices, customer names and contact details, amounts, VAT, payments, notes and follow-up logs that you enter. For this data you are the controller and we act as your processor.
• Payment data: plan, status, currency, country and payment reference. Card and bank details are handled by Flutterwave or Paystack; we never see or store them.
• Technical data: your approximate country (from your connection) to show the right price, and basic logs for security and troubleshooting.
• Messages: what you send us by email or WhatsApp when you ask for support.

2. Why we use it

• To provide the Service and your plan, and to keep your account secure.
• To process payments and manage subscriptions.
• To give support and tell you about updates, billing and important changes.
• To meet legal and accounting obligations.

Our lawful bases are performance of our contract with you, our legitimate interests in running and securing the Service, legal obligation and, where needed, your consent.

3. Who we share it with

We do not sell personal data. We use trusted providers to run the Service: Supabase (database, authentication and server functions), Cloudflare (hosting and email routing), Flutterwave and Paystack (payments), and WhatsApp (chat support, if you choose to use it). They process data only for these purposes. Your data may be stored or processed outside Nigeria; where that happens we rely on appropriate safeguards as required by the NDPA. We may also disclose data where the law requires it.

4. Your customers’ data

If you enter your own customers’ details, you must have a lawful reason to do so and to contact them, for example sending a payment reminder. You are responsible for that. We process their data only on your instructions.

5. How long we keep it

We keep account and Your Data while your account is active. After it ends we keep Your Data for 30 days for export, then delete it. Payment and billing records are kept for as long as tax and accounting law requires.

6. Security

Data is encrypted in transit, access is limited to the signed-in account owner through database access rules, and payment notifications are verified before they change an account. No system is perfectly secure; if a breach affects your data we will notify you and the regulator as the law requires.

7. Your rights

You may ask to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent. Email support@foshsolutions.com and we will respond within a reasonable time. You may also complain to the Nigeria Data Protection Commission.

8. Cookies and storage

The app uses your browser’s local storage and a service worker only to keep you signed in, remember small preferences and let the app load quickly. We do not use advertising trackers.

9. Children

The Service is for businesses and is not directed at anyone under 18.

10. Changes and contact

We may update this policy and will post the new date above. Questions: Fosh Digital Solutions, Lagos, Nigeria · support@foshsolutions.com · WhatsApp +234 703 815 1878.