Privacy Policy

Who we are

This policy explains how the PatoHQ website and application handle personal data.

What we collect

We collect the minimum needed to make PatoHQ work:

• Account information, your name, email address and password (stored securely and hashed).
• Business details, business name, location, currency, staff profiles and settings you add.
• Usage data, anonymised information about how you use the product, to improve it.
• Payment information, processed by Pesapal on their secure systems; we do not store card numbers.

Forms on this website

The forms on this site send what you write to us. Your submission is processed by Formspree, a form-handling service, and forwarded to our inbox:

• Enquiries sent from the contact form, a pricing question, a demo request or anything else you ask, together with the reply address you leave.
• Anything you choose to tell us in a form, such as your name, email address, business name and what you would like to know or book.

How long we keep enquiries

Form enquiries are kept for 24 months so a question about an earlier order can still be answered, and are then deleted. You can ask us to delete an enquiry sooner, using the address below.

Why we collect it

We use this data to provide the service, keep it secure, send important account notices, answer your questions, and improve PatoHQ. We do not sell personal data to anyone, and we do not use form enquiries for advertising.

Who we share it with

Only the providers required to run the service, and only when necessary:

• Hosting provider (Cloudflare), stores data securely for us.
• Database provider (Supabase), stores application data for us.
• Form-handling service (Formspree), processes submissions from the forms on this site and forwards them to our inbox.
• Payment processor (Pesapal), processes subscription payments.
• Email provider, sends transactional and account emails.

Data retention

We keep your data for as long as your account is active, plus a short period after closing so you can change your mind. You can export your data at any time from your settings.

Your rights

You can access, correct, export or delete your data at any time. Contact us and we will action your request promptly.

How we protect data

Data is encrypted in transit, protected with row-level access controls so staff only see what their role allows, and access is limited to what's needed. Submissions from the forms on this site are checked for spam and rate-limited before they reach our inbox, and are delivered by email to our team.

Children's privacy

PatoHQ is a business tool and is not intended for children under 16. We do not knowingly collect their data.