Zero monthly fees perpetual license available.View Pricing
Invently Logo
inventlySales & Inventory
Back to Homepage
Data Protection & Sovereignty

Privacy Policy

Effective Date: October 24, 2026 · Codelabgh, Accra, Ghana

1. Overview & Commitment

Codelabgh ("Codelabgh", "we", "us", or "our") is a Ghanaian software provider in Accra, Ghana. We develop point of sale (POS) and inventory management software engineered for retail stores, supermarkets, wholesale distributors, pharmacies, restaurants, boutiques, and manufacturers across Ghana.

This Privacy Policy outlines how we collect, store, handle, and safeguard personal and business data across our website (invently.codelabgh.com), our desktop software, mobile companion apps, and cloud multi-branch synchronization services. We operate in strict adherence to the Data Protection Act, 2012 (Act 843) of the Republic of Ghana.

2. The Offline-First Privacy Guarantee

Unlike standard cloud-only POS systems that stream every checkout transaction, customer contact, and daily revenue number to remote third-party servers, Invently operates with an Offline-First architecture:

  • Local Database Custody: For all Offline Edition users (Basic and Pro), your complete product catalogue, batch numbers, supplier wholesale costs, customer lists, and sales transactions reside locally on your physical computer hard drive inside an encrypted SQLite database.
  • Zero Remote Sales Telemetry: When operating offline or without internet connectivity, Invently rings up sales, prints thermal receipts, and reconciles stock with zero data transmitted over the internet.
  • Zero Backdoor Access: Invently administrators and engineers have no backdoor access to inspect your daily revenue totals, gross margins, or cashier shift counts.

3. Information We Collect

We only collect data strictly necessary to fulfill commercial agreements, authenticate software licenses, and deliver technical support:

  • Account & Representative Information: Full name, business email address, direct phone/WhatsApp number, registered company name, trading style, and store physical location in Ghana.
  • Licensing & Machine Telemetry: A non-reversible cryptographic hardware fingerprint (derived from hardware IDs such as CPU ID and motherboard UUID) to authenticate single-workstation perpetual licenses and prevent unauthorized cloning. No personal files or documents are ever scanned.
  • Billing & Payment Records: Payment date, amount in Ghanaian Cedis (GH₵), payment reference code, and payment method used (such as MTN MoMo, Telecel Cash, AT Money, or bank wire). We do not store mobile wallet PINs or credit card numbers.
  • Cloud Edition Multi-Branch Synchronisation (Optional): For Cloud Edition subscribers, branch inventory movements, inter-branch stock transfers, and sales reports are transmitted over encrypted TLS 1.3 channels to our secure cloud database, strictly partitioned by your private business_id via PostgreSQL Row-Level Security (RLS).

4. Information We Never Harvest or Sell

Our commercial model is based entirely on transparent software licensing fees. We enforce a strict red line:

  • We never sell, rent, broker, or trade your inventory records, customer lists, or sales figures to third parties.
  • We never inject third-party ad networks or programmatic trackers into your POS terminal interface.
  • We never analyze your wholesale pricing or gross margins to launch competing trading or distribution arms.

5. Google Drive Cloud Backup Architecture

When you activate the automated cloud backup feature in Offline Pro or Cloud editions, Invently connects directly to your authorized Google Drive account using scoped OAuth:

  • Restricted Scope (drive.file): Invently cannot read, list, modify, or delete any personal documents, spreadsheets, photos, or files outside the application's own designated backup folder.
  • Client-Side Encryption: Your database is archived into a proprietary .invently package and encrypted locally with AES-256 before upload.
  • Direct Transfer: Backups flow directly from your computer to Google's secure servers. Invently servers never touch, intercept, or stage your backup archives.

6. Shop-Floor Internal Privacy & Staff Roles

Invently provides granular Role-Based Access Control (RBAC) to ensure operational privacy within your business:

  • Cost & Margin Masking: Cashiers only view retail selling prices. Wholesale purchase prices and profit margins are permanently hidden from sales counter screens.
  • Tamper-Proof Stock Ledger: An append-only transaction ledger prevents cashiers from altering historical stock quantities or deleting past receipts without recorded manager authorization.
  • Blind Cash Reconciliations: Prevent cashiers from viewing expected drawer totals prior to entering their physical end-of-shift cash count.

7. Lawful Basis for Processing (Ghana Act 843)

In accordance with Section 18 of the Ghana Data Protection Act, 2012 (Act 843), we process data exclusively under verified legal grounds:

  • Contractual Performance: Generating license keys, authenticating workstations, managing subscription renewals, and providing requested technical support.
  • Legal & Tax Obligations: Maintaining statutory transaction and invoice records required under Ghana Revenue Authority (GRA) guidelines.
  • Legitimate Interests: Protecting our proprietary software from unauthorized pirated distribution.
  • Explicit Consent: When you request a callback, submit a contact inquiry, or authorize Google Drive cloud backup integration.

8. Third-Party Service Providers

We only partner with vetted technical and financial service providers bound by strict confidentiality:

  • Payment Processors: Regulated Bank of Ghana payment aggregator gateways for Mobile Money and card settlements.
  • Cloud Infrastructure: Enterprise cloud hosting facilities (Neon / Hostinger / Cloudflare) for Cloud Edition multi-branch database hosting.
  • Transactional Messaging: Licensed Ghanaian SMS gateway providers and transactional email relays for sending license tokens, receipts, and security alerts.

9. Technical & Operational Security Measures

We maintain multi-layered administrative, physical, and technical safeguards:

  • Encryption in Transit: 100% of website communications, cloud API calls, and sync synchronization channels utilize modern TLS 1.3 protocol.
  • Encryption at Rest: Cloud databases utilize AES-256 volume-level encryption; local desktop databases support transparent SQLCipher encryption.
  • Row-Level Tenant Isolation: Cloud multi-branch accounts use strict schema and row-level security policies preventing cross-tenant leakage.

10. Data Retention & Deletion Protocols

Offline Edition: You retain complete physical custody of your data. Records remain on your computer indefinitely until you choose to uninstall or delete them.

Cloud Edition: Following the termination or cancellation of an active Cloud Edition subscription, your cloud database enters a 30-day grace period during which you may request a complete export in CSV, Excel, or SQL format. After 30 days, cloud operational data is purged from active tables and overwritten across scheduled backup cycles within 90 days.

11. Your Statutory Rights Under Ghana Act 843

Under the Data Protection Act, 2012 (Act 843), you have clear statutory rights regarding personal data:

  • Right to Access (Section 35): Request confirmation and readable copies of personal data held about you.
  • Right to Correction (Section 33): Require us to rectify inaccurate or out-of-date business and contact information.
  • Right to Erasure (Section 32): Request deletion of data held without prevailing legal or tax justification.
  • Right to Data Portability: Export your inventory catalogues, customer lists, and transaction reports at any time into CSV or Excel format without vendor lock-in.

12. Cookies & Website Analytics

Our public website (invently.codelabgh.com) uses minimal cookies and local browser storage strictly to ensure site performance and remember UI preferences (e.g., pricing toggle states). We do not deploy invasive third-party cross-site behavioral tracking cookies.

13. Contact Our Data Protection Officer

If you have questions regarding this Privacy Policy, wish to exercise statutory data rights under Act 843, or require an enterprise security questionnaire, please contact our Data Protection desk in Accra:

You also have the right to lodge a complaint with the Data Protection Commission of Ghana (DPC) at dpc.gov.gh.