Privacy Policy

Incep Digital is a digital solutions company based in Ghana. We provide a marketing website, managed website subscriptions, and a suite of business applications that share a single Incep account:

• Incep Finance is a mobile app for recording and managing business finances, invoices, and receipts.
• Incep CRM is a mobile app for managing your contacts, leads, and customer relationships.
• Incep Commerce is a mobile app for managing an online store, products, and orders.

These apps use one shared Incep platform account. When you delete that account, it is removed across all of our apps. This policy covers all of the above unless a section states that it applies only to the website or only to a specific app.

We also license Incep Platform, a website and commerce platform supplied to you as source code. This policy covers the personal information we hold about you as a customer: your account, your licence, your purchase, and your downloads.

It does not cover the sites you build with it. You install Incep Platform on infrastructure you control, so the sites you run on it, their visitors, and their customers are yours alone. We do not host those deployments, we cannot access them, and no data from them reaches us. You are the controller of that data and it is for you to publish your own privacy notice covering it.

Information you provide directly

• Account registration is your name, email address, and password when you create an Incep account.
• Phone number is collected when you enable SMS-based two-factor authentication or verify a phone number, so we can send a one-time code.
• Google sign-inis optional. If you choose "Continue with Google", we receive your name, email address, and profile identifier from Google to create or access your account.
• Contact and enquiry forms collect your name, email address, phone number (optional), and your message.
• Subscription and payment details are processed securely through Paystack for payments in Ghana cedis and Stripe for international payments in US dollars. We do not store your full card or Mobile Money details on our servers.
• Project brief and uploaded files include business information, brand assets, and content you submit to help us build your website.
• Business and customer data you enter into the apps, such as financial records and invoices in Incep Finance, contacts and leads in Incep CRM, and products and orders in Incep Commerce. This is described further in section 4.
• Images and receipts, when you use Incep Finance to attach or photograph a receipt using your camera or photo library.

Information collected automatically

• Device information such as device model, operating system version, and app version, used to operate the apps and to diagnose issues.
• Network information in Incep Commerce, used to check connectivity and deliver content reliably.
• Push notification tokens in Incep Commerce, so we can send order and account notifications to your device (see section 5).
• Usage data and cookies on our website, such as pages visited, time on site, referring URLs, and browser and device information collected via Google Tag Manager (see section 8).
• Security signals processed by Cloudflare Turnstile on our web forms to prevent spam and abuse, including your IP address and browser signals.

Biometric unlock

Incep Finance and Incep CRM can be locked with your device biometrics, such as fingerprint or face recognition. This check happens entirely on your device through your operating system. We never receive, see, or store your biometric data.

We use the information we collect to:

• Create and manage your account and subscription.
• Provide, operate, secure, and improve our website and apps.
• Authenticate you, including two-factor authentication and biometric unlock.
• Process payments and send receipts, invoices, and renewal notices.
• Send service messages, such as payment reminders, security alerts, and, for Incep Commerce, order and account push notifications.
• Respond to enquiries submitted through our forms.
• Analyse website usage to improve performance and user experience.
• Measure the performance of our advertising on the website.
• Detect, prevent, and address fraud, abuse, and security incidents.
• Comply with applicable laws and regulations.

We do not sell your personal information, and we do not use your data for unsolicited marketing beyond service-related communications. The apps do not contain third-party advertising or analytics tracking software.

When you use Incep Finance, Incep CRM, or Incep Commerce, you may enter information about your own business and your own customers, such as contact details, orders, and financial records. For that data, you are the controller and we act as a processor: we store and process it only to provide the app to you and under your instructions.

You are responsible for having a lawful basis and any required consent to collect and store information about your customers in our apps, and for handling that information in line with the laws that apply to you. If you ask us to delete your account, the customer data you stored is deleted as described in section 9, subject to legal retention requirements.

This section does not apply to Incep Platform. Because you self-host it, we are neither controller nor processor of anything held in your deployment: not your site's visitors, not its customers, not its orders. That data never reaches our systems, and deleting your Incep account does not touch it. The third-party services you connect to your deployment, such as payment processors, email providers, and AI providers, are your own relationships and are governed by their terms, not ours.

We share information only with trusted service providers needed to operate our platform, and only to the extent required for the service they provide:

• Supabase for database, authentication, and file storage infrastructure.
• Paystack for processing payments in Ghana cedis, governed by Paystack's Privacy Policy.
• Stripe for processing international payments in US dollars, governed by Stripe's Privacy Policy.
• Arkesel for sending SMS one-time codes for phone verification and SMS two-factor authentication.
• Resend for transactional email delivery.
• Cloudflare for object storage of uploaded files and for Turnstile bot protection on our web forms.
• Google for website analytics through Analytics and Tag Manager, for optional Google sign-in, and for Firebase Cloud Messaging, which delivers push notifications in Incep Commerce.
• Meta for advertising measurement on our website through the Meta Pixel.
• Integrations you enable, such as outbound webhooks. If you or your administrator connect an integration, we send the relevant event data to the endpoint you configure. You control these connections.

We may also disclose information if required by law, court order, or government authority, or to protect the rights, property, and safety of Incep Digital, our users, or the public.

Our apps request only the permissions needed for features you use:

• Camera and photos (Incep Finance) to photograph or attach receipt images. Images are only accessed when you choose to add one.
• Notifications (Incep Commerce) to send order and account push notifications. You can turn these off in your device settings.
• Biometrics (Incep Finance and Incep CRM) to unlock the app. This is handled by your device and never shared with us.

The apps store your login session securely on your device and may cache your data locally so the app works quickly and offline. This local data is removed when you log out or uninstall the app.

We and our service providers may store and process your information in countries outside Ghana, including in the United States and the European Union. Where data is transferred internationally, we rely on service providers that offer appropriate safeguards for the protection of your information.

Cookies and similar technologies are used on our website. Our mobile apps do not use advertising cookies or third-party tracking pixels.

• Strictly necessary cookies are session tokens required for authentication and to keep you logged in.
• Analytics cookies from Google Analytics, via Tag Manager, collect aggregated, anonymous data about how visitors use our site.
• Advertising pixels from the Meta Pixel measure actions taken after clicking one of our ads. This data may be shared with Meta.

You can disable non-essential cookies in your browser settings at any time. Doing so may affect certain features of the site.

We retain your personal data for as long as your account is active or as needed to provide our services. When you request account deletion, we delete your account and associated personal data within 30 days, except where we are legally required to retain it. Financial and transaction records are kept for up to 7 years in accordance with applicable law, after which they are also deleted. Residual copies in backups are removed on a rolling cycle.

Analytics and advertising data retained by third parties, such as Google and Meta, is subject to their own retention policies.

You can request deletion of your Incep account and associated data at any time. Because the apps share one account, deleting it removes your data across Incep Finance, Incep CRM, and Incep Commerce.

If you hold an Incep Platform licence, deleting your account also removes the licence record and with it your access to downloads, future updates, and the developer portal. Source code you have already downloaded and any sites you have deployed are unaffected, because they are on your own infrastructure and we cannot reach them. We cannot restore a deleted licence, so if you only want to remove personal data, contact us first.

• On the web, submit a request at incepdigital.com/delete-account.
• In Incep Finance, open Settings and tap Request Account Deletion.
• By email, contact contact@incepdigital.com.

We verify your identity before processing a request. Deletion timelines and legal retention exceptions are described in section 9.

Depending on your location, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal data.
• Portability, to receive your data in a machine-readable format.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

Where the GDPR or similar laws apply, we process personal data on the basis of performing our contract with you, your consent, our legitimate interests in operating and securing our services, and compliance with legal obligations.

To exercise any of these rights, contact us at contact@incepdigital.com. We will respond within 30 days.

Our website, apps, and services are intended for business users and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

We take the security of your data seriously. We use industry-standard measures, including HTTPS encryption, secure authentication, encrypted on-device storage of login sessions, and access controls, to protect your personal information against unauthorised access, disclosure, alteration, or destruction.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Our website and apps may link to or rely on external services. This Privacy Policy applies to Incep Digital and our apps only. We are not responsible for the privacy practices of third-party services, even if linked from ours. We encourage you to review the privacy policies of any service you use.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or in the app.

Continued use of our website, apps, or services after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: