Privacy

Privacy Policy

Last updated: October 7, 2026

This Privacy Policy explains how Bypenth Technologies Limited ("Wareflow", "we", "us" or "our") handles personal data when you visit wareflowapp.com, use the Wareflow web dashboard (dashboard.wareflowapp.com) or the Wareflow iPhone app, or shop at an online storefront that Wareflow hosts for a merchant. It should be read with our Terms of Service.

1. Who is responsible for your data

For your Wareflow account, billing and the use of our website and apps, we are the data controller. For the business records a merchant keeps in Wareflow (products, stock, orders, customers and their contact details), the merchant is the controller and we process that data on their behalf. If you bought from a merchant's storefront and want to see or delete your data, contact the merchant; we will help them respond.

2. What we collect

Account and business data

  • Your name, email address and, if you give it, phone number.
  • Your password, stored only as a hash, or your Google account identity if you sign in with Google.
  • Business details you enter: business name, country, currency, locations, products, stock movements, orders, customers, and the team members and roles you invite.
  • An audit trail of actions taken in your account, with who and when.

Shoppers on a storefront

When you buy from a merchant's Wareflow storefront we process your name, email, phone number, delivery address, order details and, if you create a shopper account, your account details, on the merchant's behalf.

Payments

Wareflow plan fees are paid through Flutterwave. Storefront payments are processed by the provider the merchant has connected (Paystack, Stripe or Flutterwave). You enter card or bank details on the provider's page, not with us; we keep the payment reference, amount, currency and status.

Website forms

If you join the waitlist or use the contact form we collect the name, email, business type, subject and message you type. This website does not use advertising or analytics cookies.

Devices and usage

  • IP address, browser or device type and request times, used for security, rate limiting and troubleshooting.
  • In the iPhone app, usage analytics and crash reports (Firebase Analytics and Crashlytics) and, if you allow notifications, a push token (Firebase Cloud Messaging).
  • The camera, to scan barcodes and take photos, and the photo library, to pick product images and a profile picture. Scanning is processed on your device; images you choose to upload are stored with our image hosting provider.
  • Messages and contact details you send through the support chat in the app's Help Center (provided by tawk.to).

3. How we use it

  • To provide, secure and support the Service and your account.
  • To send service messages such as email verification, password resets, team invitations, billing reminders and the low-stock alerts you turn on.
  • To take and reconcile payments, and to prevent fraud and abuse.
  • To understand and improve how the Service performs.
  • To contact people on our waitlist about early access, and to answer contact form messages.

We do not sell your personal data.

4. Who we share it with

We use service providers to run Wareflow, and give them only what they need: payment providers (Flutterwave for plan fees; the provider a merchant connects for storefront sales), an email delivery provider (Mailtrap), Google (sign-in), Firebase (analytics, crash reports and push notifications), Cloudinary (image hosting), tawk.to (support chat), and cloud hosting and infrastructure providers. A merchant sees the data of their own customers and team. If an optional AI-assisted drafting feature is enabled for your account, the text you choose to submit is sent to our AI provider to produce a suggestion; at the time of writing those features are not enabled. We may disclose data when the law requires it, to protect rights and safety, or in a business transfer such as a merger or acquisition. Some providers process data outside Nigeria.

5. How long we keep it, and deletion

We keep account and business data while your account is active. If you close your account (Settings, then Account, in the web dashboard) your account and the businesses you own are archived. For 30 days, signing back in restores them. After 30 days they cannot be restored and the data is permanently deleted, except for records we must or may keep for legal, tax, fraud-prevention or dispute purposes, such as payment records and audit logs. Waitlist and contact messages are kept until you ask us to remove them or we no longer need them.

6. Your rights

Under the Nigeria Data Protection Act 2023, and other laws that apply to you, you can ask to access, correct or delete your personal data, to restrict or object to its use, and to receive a copy of it. There is no self-service export yet; email us and we will provide one. We aim to reply within 30 days. You can also complain to the Nigeria Data Protection Commission.

7. Security

Traffic to Wareflow uses HTTPS, passwords are stored hashed, access to a business is limited by role, and actions are written to an audit trail. No system is perfectly secure, so please use a strong, unique password.

8. Children

Wareflow is for people aged 18 or over, or the age of majority where they live. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this policy from time to time. When we do we will change the "Last updated" date and, for material changes, tell you by email or in the Service.

Contact Us

For questions or to exercise your rights, contact us: