Privacy Policy

This Privacy Policy explains how Mascrade ("we," "us," or "our") collects, uses, and protects personal information when you use the Mascrade web application and related services (the "Service"). By creating an account you agree to the practices described here.

1. Information we collect

Account information

When you register we collect your business name, your name, work email, phone number, and a password (stored in encrypted form). We also record when you accepted this Privacy Policy and the End User License Agreement.

Business data

You enter and store customers, quotations, jobs, invoices, payments, expenses, schedules, and related business records ("Your Data"). This is the data you use the Service to manage.

Technical data

We automatically collect device and usage information such as IP address, browser type, pages visited, and timestamps to operate, secure, and improve the Service. When you pay, our payment processor handles your payment details; we do not store full card numbers.

2. How we use information

We use the information we collect to:

• create and manage your account and authenticate your sign-ins;
• provide the Service, including quotations, invoicing, payments, reminders, dispatch, and reports;
• send service messages, verification emails, billing notices, and (with your consent) product updates;
• detect, prevent, and respond to abuse, fraud, and security incidents;
• understand usage and improve the Service; and
• comply with legal obligations.

3. Sharing your information

We do not sell your personal information. We share information only in these limited circumstances:

• Integrations. When you connect a third-party service (for example QuickBooks, Xero, or a mobile-money provider), the relevant portions of Your Data are transferred to or read from that service strictly as needed for the connection you authorised.
• Service providers. We use processors for hosting, email delivery, and payment processing. They access information only to perform their role on our behalf and under confidentiality obligations.
• Legal reasons. We may disclose information where required by law, legal process, or government request, or in urgent circumstances to protect the safety or rights of any person.
• Business transfers. In the event of a merger, acquisition, or sale of assets, your information may transfer to the successor, subject to this Privacy Policy.

Other members of your organisation (your staff) can see the business data within your own workspace under the access levels you grant them. Business data is not visible to other customers of the Service.

4. Security

We protect information with organisational and technical safeguards, including encryption in transit (TLS), encryption of sensitive credentials at rest, hashed passwords, access controls, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

5. Data retention

We keep account information and Your Data for as long as your account is active. You can export Your Data at any time. If you close your account, we will delete Your Data and account information within a reasonable period, except where we are required by law to retain records (for example tax-related records) or where backups are retained temporarily for operational recovery.

6. International & Uganda transfers

The Service is operated in the East African region and processed with the assistance of hosting providers. Your information may be transferred to and processed outside the country where you are located. Where required, we rely on appropriate safeguards to protect those transfers.

7. Your rights

Subject to applicable law, you may:

• access, correct, or update your account and business information;
• export or request a copy of Your Data;
• request deletion of Your Data;
• revoke a connected integration at any time;
• opt out of non-essential communications; and
• withdraw consent, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at privacy@mascrade.app. We will respond within a reasonable time.

8. Cookies

We use essential cookies and storage for authentication and security. We may use analytics cookies to understand usage; you can disable these in your browser, which may limit some non-essential features.

9. Children's privacy

The Service is intended for business use and is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email, and the "Effective date" will be updated. Continued use of the Service after changes take effect constitutes acceptance.

11. Contact

For privacy questions or complaints, contact privacy@mascrade.app or write to our registered office in Kampala, Uganda. Email is the fastest way to reach us.