Who we are
Pandesk is a shop-management service for small shops in Nigeria. This policy follows the Nigeria Data Protection Act 2023 (NDPA).
There are two kinds of personal data in Pandesk. Data about you, the shop owner or staff member, is data we control. Data about your shop's customers is data you control, and we only handle it for you. The Data Processing Agreement explains that second part.
What we collect about you
Your name, phone number or email, a hashed password (we never store the password itself), the shop name and address, and what you do in the app (for example, sales you record and stock you change). We also keep the date you agreed to our Terms and the Data Processing Agreement.
If you pay us by card, Paystack handles the card. We receive the payment result, not your card number.
Why we use it
To run your account: sign you in, show your sales and stock, send receipts and reminders you ask for, bill you, and help you when you contact us. We also use it to keep the service secure and to fix faults.
We do not sell your data and we do not use your shop's customer data for advertising.
Who else sees it
Only the services that help us run Pandesk: our hosting provider (Cloudflare), Paystack for payments, and Meta for WhatsApp messages you choose to send or receive. They may process data outside Nigeria. We only use providers that protect data to a standard the NDPA accepts.
We share data with the authorities only when the law requires it.
How long we keep it
WhatsApp conversations and messages are kept for 12 months and then deleted. Sales, stock and accounting records stay while your account is open, so your books remain complete. If you close your account, we delete your data within 30 days, apart from records we must keep by law.
Your rights
You can ask to see your data, correct it, export it, or have it deleted. You can export your shop's data from the app at any time, even when your plan has ended.
To ask for deletion or anything else, message our support WhatsApp line. We will answer within 7 days. You can also complain to the Nigeria Data Protection Commission (NDPC).
Security
Passwords are hashed, access tokens are encrypted, and each shop can only see its own data. If a breach puts your data at risk, we tell the NDPC within 72 hours and tell you without delay.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.
PanDesk · Privacy Policy · Last updated 14 October 2026