Privacy Policy

Last updated: December 3rd, 2025

1. INTRODUCTION

At CACU Technology Services (“CACU”, “us”, “we”, or “our”), we are committed to protecting the privacy and security of personal information supplied by business owners, employees, clients, and other interested persons (“you” or “your”) and ensuring that your personal information is handled securely and responsibly. This Privacy Policy (this “Privacy Policy” or “Policy”) governs your visit to our Website and Service, and explains how we collect, safeguard, and disclose information that results from your use of our Service. It also explains your rights and choices concerning your personal information.

For the purpose of this Policy, “Website” refers to CACU’s website which can be accessed at https://www.cacu.africa and “Service(s)” includes CACU’s web-based application, mobile application, and all related platforms. We use your data to provide and improve our Service. By using our Service, you agree to the collection and use of information in accordance with this Policy.

Please note that the collection and processing of your personal information is in accordance with:

The Nigeria Data Protection Act, 2023 and other data protection regulations in force in Nigeria for Users in Nigeria
The General Data Protection Regulation (GDPR), if you are a resident of the European Union (EU) and European Economic Area (EEA)
Other applicable data protection laws in your jurisdiction

Our Terms of Service (“Terms”) govern all use of our Service and together with this Policy constitutes your agreement with us (“Agreement”).

Unless otherwise defined in this Policy, the terms used in this Policy have the same meaning as in our Terms of Service.

2. DEFINITIONS

SERVICE means the CACU web platform and mobile application operated by CACU Technology Services.
PERSONAL DATA means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession). This includes but is not limited to names, email addresses, phone numbers, business information, and financial data.
USAGE DATA is data collected automatically either generated by the use of Service or from Service infrastructure itself (for example, the duration of a page visit, features accessed, or device information).
COOKIES are small files stored on your device (computer or mobile device) that help us improve your experience and analyze how our Service is used.
DATA CONTROLLER means a natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed. For the purpose of this Privacy Policy, we are a Data Controller of your data.
DATA PROCESSORS (OR SERVICE PROVIDERS) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively, including payment processors, cloud storage providers, and analytics services.
DATA PROTECTION OFFICER means an individual appointed by CACU to ensure that the strategy and implementation of data protection requirements are in compliance with the data protection policy and the relevant extant laws.
DATA SUBJECT is an identifiable person; one who can be identified directly or indirectly, in particular by reference to an identification number, or to one or more factors specific to his/her physical, physiological, mental, economic, cultural, or social identity, and includes CACU’s clients, business partners, and employees. It refers to one who is the subject of Personal Data.
USER is the individual using our Service. The User corresponds to the Data Subject, who is the subject of Personal Data.
FINANCIAL DATA refers to business financial information including but not limited to transactions, invoices, receipts, bank account information, inventory values, payroll data, sales records, and profit/loss information.

3. INFORMATION COLLECTION AND USE

We collect only the minimum information required to meet the purposes mentioned in this Policy. CACU is designed to help business owners manage their operations efficiently, and the data we collect is essential for providing bookkeeping, inventory management, invoicing, payroll, analytics, and other business management services.

Neither CACU nor its representatives shall be responsible for the authenticity of information provided by Data Subjects. As normal business practice, CACU may collect several different types of information for various purposes to provide and improve our Service to you.

Our Commitment:

We collect data transparently and only for specified purposes
We do not sell your personal or business data to third parties
We implement strict security measures to protect your information
We give you control over your data and how it’s used

4.0 TYPES OF DATA COLLECTED

4.1 PERSONAL DETAILS

While using our Service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you, or to manage your business operations. Personally identifiable information may include, but is not limited to:

Account Information:

Email address
First name and last name
Phone number
Business name and registration details
Business address, State, Province, ZIP/Postal code, City
Tax identification numbers (where applicable)
Business category and industry

Financial Information:

Bank account details for payment processing
Transaction records (sales, expenses, transfers)
Invoice and receipt data
Inventory information (products, prices, quantities)
Payroll information (employee salaries, benefits, tax withholdings)
Credit and financing application data

Customer and Vendor Information:

Names, email addresses, and phone numbers of your customers
Customer transaction history and purchase patterns
Vendor/supplier contact information and payment terms
Loyalty tags and customer segmentation data

Employee Information (for Payroll & HR features):

Employee names, addresses, and contact information
Employee identification numbers
Salary and compensation details
Benefits and deductions information
Leave and attendance records
Tax withholding information

Business Analytics Data:

Sales performance metrics
Profit and loss information
Cash flow data
Inventory turnover rates
Customer lifetime value calculations
Sales channel performance data

4.2 USER CONTROL

Important: Users manually enter this information as needed for business management purposes. The data you provide enables features such as:

Creating and sending invoices and receipts
Managing customer relationships and loyalty programs
Tracking inventory and receiving low-stock alerts
Processing payroll and managing employee records
Generating financial reports and analytics
Applying for credit and financing opportunities
Tracking sales across multiple channels (Instagram, WhatsApp, in-store, etc.)

We do not:

Automatically access your device’s contact list
Collect data from your device without your explicit input
Access your social media accounts without permission
Share your business data with competitors or third parties for their benefit

You have full control:

Over what information you provide to the Service
Over who can access your business data within your team
To export your data at any time
To delete your data when you close your account

4.3 PURPOSE OF DATA COLLECTED

The information you provide is used solely to enable features within the app and provide you with business management services, including:

Bookkeeping: Maintaining accurate financial records, ledgers, and statements
Inventory Management: Tracking stock levels, generating alerts, managing product variations
Invoicing & Receipts: Creating professional documents, tracking payments, sending reminders
Customer Management: Building customer profiles, tracking purchase history, managing loyalty programs
Sales Channel Analytics: Understanding which platforms drive your revenue (Instagram, WhatsApp, physical store, etc.)
Payroll & HR: Calculating salaries, managing benefits, ensuring tax compliance
Financial Analytics: Generating insights about profit margins, trends, and business health
Credit & Marketplace: Assessing creditworthiness and matching you with financing opportunities
Tax & Compliance: Automating tax calculations and ensuring regulatory compliance

We do not:

Use your data for marketing purposes unrelated to CACU services
Share your business financial data with third parties without your consent
Sell or rent your information to data brokers or advertisers

4.4 USAGE OF DATA

We may also collect information that your browser or device sends whenever you visit our Service or when you access our Service through a mobile device (“Usage Data”).

This Usage Data may include information such as:

Your computer’s or device’s Internet Protocol address (IP address)
Browser type and version
Device type, model, and operating system
The pages of our Service that you visit
The time and date of your visit
The time spent on pages and features
Unique device identifiers
Mobile network information
Diagnostic and crash data
Features and functions you use most frequently
Settings and preferences

Purpose: This data helps us:

Improve the performance and stability of our Service
Understand how users interact with features
Identify and fix technical issues
Optimize the user experience
Ensure security and prevent fraud

When you access our Service with a mobile device, Usage Data may also include:

The type of mobile device you use
Your mobile device unique ID
The IP address of your mobile device
Your mobile operating system version
The type of mobile Internet browser you use
App version and build information
Device language and timezone settings

4.5 LOCATION DATA

We may collect and process information about your actual location to provide location-based features such as:

Currency settings based on your region
Compliance with local tax regulations
Sales channel insights based on customer locations
Fraud detection and security measures

You can enable or disable location services through your device settings at any time. Disabling location services may limit certain features of our Service.

4.6 COOKIES AND TRACKING TECHNOLOGIES

To enhance your experience on our platforms, we use cookies and similar tracking technologies to track activity on our Service and hold certain information. These technologies aid us in collecting information related to your preferences, settings, and other analytical data.

What are Cookies?

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies such as beacons, tags, pixels, and scripts are also used to collect and track information and to improve and analyze our Service.

Types of Cookies We Use:

1. Essential Cookies (Strictly Necessary):

• Required for the Service to function properly

• Enable core functionality like security, authentication, and session management

• Cannot be disabled without affecting Service functionality

1. Session Cookies:

• Used to operate our Service and maintain your logged-in state

• Deleted when you close your browser

1. Preference Cookies:

• Remember your settings, preferences, and choices

• Store language preferences, currency settings, and display options

• Help customize your experience

1. Security Cookies:

• Used for security purposes and fraud prevention

• Detect suspicious activity and unauthorized access attempts

• Protect your account and business data

1. Analytics Cookies:

• Help us understand how you use our Service

• Collect information about page visits, feature usage, and user flows

• Used to improve Service performance and user experience

• Help us measure the effectiveness of our marketing campaigns

• Used only with your consent (where required by law)

Third-Party Cookies:

Some cookies may be set by third-party services integrated into our Website, such as:

• Analytics providers (Google Analytics, Firebase)

• Payment processors

• Customer support tools

• Marketing and advertising partners

These third-party cookies are subject to the respective privacy policies of their providers. By using our Website and accepting cookies, you consent to the use of these various types of cookies as described in this Policy.

Cookie Data Processing:

Our use of Cookies may involve the processing of personal data. The information we may obtain through Cookies includes:

Device information (IP address, device type, model, characteristics)
Browser information (type, version, settings, language)
Operating system details
Location information (country, region, city)
Unique identifiers
Usage statistics and patterns
Error reports and diagnostic data
Pages visited and links clicked
Features used and time spent
Referral sources and URLs

Managing Cookies:

You can control and manage cookies based on your preferences:

Browser Settings:

Most web browsers allow you to control cookie settings
Find these settings in “Options”, “Preferences”, or “Settings” menu

You can view, manage, and delete cookies

1. Cookie Preferences:

• You can set preferences for different types of cookies

• Choose to accept or reject specific cookie categories

• Update your preferences at any time through our cookie banner

1. Opting Out:

• Adjust browser settings to reject all cookies

• Receive alerts when cookies are being sent

• Delete existing cookies from your device

Important Note: Disabling cookies may impact the functionality of our Service and limit your access to certain features. Some features require cookies to function properly, including:

• Staying logged in to your account

• Saving your preferences and settings

• Shopping cart functionality

• Security features

The methods for managing cookies may vary depending on your browser and device. Please refer to your browser’s help documentation for specific instructions.

Cookie Consent:

For users in jurisdictions requiring cookie consent (such as the EU under GDPR), we will obtain your explicit consent before setting non-essential cookies. You can withdraw your consent at any time through our cookie settings.

5. USE OF DATA

CACU uses the collected data for various lawful purposes essential to providing and improving our business management services:

5.1 PRIMARY SERVICE DELIVERY

To provide, operate, and maintain our Service
To enable core features, including bookkeeping, inventory management, invoicing, payroll, and analytics
To process your transactions and manage your business operations
To calculate and track your business's financials, profit margins, and performance metrics
To generate low-stock alerts and inventory notifications
To create and send invoices, receipts, and payment reminders on your behalf
To process payroll and manage employee compensation
To facilitate payments and financial transactions

5.2 ACCOUNTS AND CUSTOMER SUPPORT:

To create and manage your account
To notify you about changes to our Service, features, or policies
To provide customer support and respond to your requests
To allow you to participate in interactive features when you choose to do so
To send you technical notices, updates, security alerts, and administrative messages
To provide tutorials, tips, and guidance on using our Service effectively

5.3 SERVICES IMPROVEMENTS AND ANALYTICS:

To gather analysis and valuable information to improve our Service
To monitor the usage and performance of our Service
To understand how users interact with features and identify areas for enhancement
To detect, prevent, and address technical issues, bugs, and errors
To develop new features, products, and services based on user needs
To conduct research and analysis on business management trends

5.4 COMMUNICATIONS AND NOTIFICATIONS:

To provide you with notices about your account, subscription status, and billing
To send expiration and renewal notices
To deliver email instructions and onboarding materials
To notify you about low inventory, pending payments, and other business alerts
To communicate about service updates, new features, and product announcements
To send you newsletters, special offers, and information about goods or services similar to those you’ve used (unless you’ve opted out)
To share educational content, best practices, and business tips

5.5 BUSINESS OPERATIONS AND LEGAL COMPLIANCE:

To fulfill any other purpose for which you provide information
To carry out our obligations and enforce our rights arising from contracts between you and us
For billing, collection, and payment processing
To comply with legal obligations, regulations, and government requests
To enforce our Terms of Service and other policies
To protect the rights, property, and safety of CACU, our users, and the public
To verify your identity and prevent fraud
To conduct anti-money laundering (AML) checks where required
To assess creditworthiness for financing and credit features

5.6 CREDIT AND FINANCIAL SERVICES:

To evaluate your eligibility for credit and financing options
To calculate your business valuation and credit readiness score
To match you with appropriate lenders and financing opportunities
To share necessary information with financial partners (with your consent)

5.7 MARKETING AND PERSONALIZATION:

To provide personalized experiences and recommendations
To understand your business needs and suggest relevant features
To conduct market research and improve our marketing efforts
In any other way we may describe when you provide the information
For any other purpose with your explicit consent

5.8 SECURITY AND FRAUD PREVENTION:

To maintain the security and integrity of our Service
To detect and prevent fraudulent transactions and unauthorized access
To verify user identities and authenticate accounts
To protect against spam, harassment, and malicious activities

Data Minimization Principle:

We adhere to the principle of data minimization, meaning we only collect and process data that is adequate, relevant, and limited to what is necessary for the purposes outlined above. We regularly review our data processing activities to ensure compliance with this principle.

Lawful Basis for Processing:

We process your personal data based on one or more of the following lawful bases:

Consent: You have given clear consent for us to process your data for specific purposes
Contract: Processing is necessary to fulfill our contract with you or to take steps at your request before entering into a contract
Legal Obligation: Processing is necessary to comply with legal or regulatory requirements
Legitimate Interests: Processing is necessary for our legitimate business interests, provided these interests don’t override your fundamental rights and freedoms

You have the right to withdraw consent or object to processing based on legitimate interests at any time.

6. RETENTION OF DATA

We will retain your Personal Data and business information only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by law.

6.1 ACTIVE ACCOUNT DATA:

While your account is active, we retain:

Account information and settings
Business financial data and records
Transaction history
Customer and vendor information
Inventory records
Employee and payroll data
Analytics and reports

This data remains accessible to you through our Service and is continuously updated as you use our features.

6.2 FINANCIAL AND TAX RECORDS:

Financial and accounting data is retained for extended periods to comply with legal and regulatory requirements:

Tax Records: Retained for a minimum of 7 years from the end of the relevant tax year, as required by tax authorities in most jurisdictions
Invoices and Receipts: Retained for 7 years to support tax filings and audits
Payroll Records: Retained for 7 years or as required by local labor and tax laws
Business Transactions: Retained for 7 years for accounting and audit purposes

6.3 AFTER ACCOUNT CLOSURE:

When you close your account:

Immediate Deletion: User-generated content that is not subject to legal retention requirements may be deleted within 30 days
Legal Retention: Financial records, tax documents, and other legally required data will be retained for the mandatory retention period (typically 7 years)
Anonymization: Where possible, data that must be retained will be anonymized to remove personally identifiable information
Backup Systems: Data in backup systems may persist for up to 90 days after deletion from primary systems

6.4 USAGE DATA:

Usage Data is generally retained for shorter periods:

Analytics Data: Typically retained for 12-24 months for service improvement purposes
Log Files: Retained for 90 days for security and troubleshooting
Performance Metrics: Aggregated and anonymized data may be retained indefinitely for statistical analysis

6.5 LEGAL AND CONTRACTUAL OBLIGATIONS:

We will retain Personal Data beyond the standard retention periods when:

Required by law, regulation, or legal process
Necessary to comply with government or regulatory inquiries
Needed to enforce our Terms of Service or other agreements
Required to establish, exercise, or defend legal claims
Necessary to protect the rights, property, or safety of CACU, users, or the public

6.6 USER CONTROL:

You have the right to:

Request deletion of your data (subject to legal retention requirements)
Export your data before closing your account
Request information about how long specific data will be retained

Data Deletion Process:

If you wish to delete your account and data:

1. Export any data you wish to keep

2. Submit a deletion request through your account settings or by contacting support@cacu.com

3. We will process your request within 30 days

4. Legally required data will be retained and then securely deleted after the retention period expires

5. You will receive confirmation when the deletion process is complete

7. TRANSFER OF DATA

We value your privacy and aim to be transparent about how and where your information is stored and processed.

7.1 International Data Transfers:

The personal and business information we collect may be stored, processed, and transferred to locations outside your country of residence, including:

United States: Our primary servers and infrastructure are located in the United States
Cloud Service Providers: We use cloud services that may store data in multiple geographic regions
Service Partners: Some data processors may operate from different countries

Why Data is Transferred:

International data transfers enable us to:

Provide reliable, scalable, and secure services
Utilize best-in-class infrastructure and service providers
Offer 24/7 availability and performance
Comply with data backup and disaster recovery requirements
Facilitate global payment processing and financial services

7.2 DATA PROTECTION MEASURES:

We implement robust safeguards to protect your data during international transfers:

Encryption:

All data transfers use industry-standard TLS/SSL encryption protocols
Data is encrypted both in transit and at rest
End-to-end encryption for sensitive financial information

Data Minimization:

Only the essential information required for specific purposes is transferred
We limit the amount of data shared with third parties
Regular audits ensure unnecessary data isn’t transferred

8. CONTACT US:

If you have questions or concerns about this Privacy Policy or your data, please contact us at support@cacu.com