Privacy Policy

1. Information we collect

Account and page information. When you create a Ringo account, we store your email, password (encrypted), and the content of your page — name, bio, links, products, menu items, media you upload, and similar.

Visitor analytics. We record basic click analytics on your page (which links/products get clicked, referrer, approximate location) so you can see what's working. This is aggregate/behavioral data, not sold to third parties.

Customer and order information. When a customer places an order, makes a booking, or buys a ticket through your page, we store their name, phone number, email (where provided), and order details so the page owner can fulfill it. This information belongs to that page and is never visible to other Ringo creators.

Community subscribers. If someone joins a page's Community (to receive announcements), we store their name, phone number, and email, along with their specific notification preferences. Marketing/communication consent is never assumed — it's only recorded when someone explicitly opts in, and they can opt out at any time via the preferences link in any message they receive, or by contacting us.

Staff/team member information. If an account owner invites staff to help manage their business, we store the invited person's name, email, phone number, and assigned role/permissions.

Affiliate and payout information. If you participate in our affiliate program or receive payouts (for example, as a musician selling tickets), we store your chosen payout method and the details needed to send that payout (such as a Mobile Money number).

Device and notification information. If you enable push notifications, we store the technical subscription details needed to deliver them to your device.

Payments. Subscription and certain order/ticket payments are handled by our payment providers (Stripe, Fapshi) — we do not store full card numbers ourselves. Payment provider credentials configured by Ringo Connect (for its own platform use) are encrypted at rest.

2. Why we process this data

We process personal data to: operate your page and account, fulfill orders/bookings/tickets, send communications you've opted into, process payments and payouts, provide analytics, maintain platform security, and comply with legal obligations. Depending on the data involved, this is based on your consent, the performance of our contract with you (these Terms), or our legitimate interest in operating and improving the service.

3. Who we share data with

We share data only as needed to operate the service, with these categories of processors:

• Fapshi — Mobile Money payment collection and payout disbursement
• Stripe — card payment processing
• Supabase — database hosting and authentication
• Vercel — application hosting
• Resend — transactional and marketing email delivery

We do not sell personal data to third parties.

4. International data transfer

Some of the providers listed above may store or process data outside Cameroon. Where this occurs, we take reasonable steps to ensure the data is protected consistent with Cameroonian law, including [DATA TRANSFER SAFEGUARD DESCRIPTION — TO BE CONFIRMED]. If a specific authorization from Cameroon's data protection authority is required for any of these transfers, we are in the process of confirming and obtaining it.

5. Data retention

We retain your personal data for as long as your account remains active, and for a limited period afterward as needed for legal, accounting, or dispute-resolution purposes, after which it is deleted or anonymized. [RETENTION PERIOD — TO BE CONFIRMED]

6. Security

We use industry-standard measures to protect personal data, including encryption of passwords and of sensitive payment credentials at rest. No system is perfectly secure; if we become aware of a data breach affecting your personal data, we will notify affected users without undue delay, consistent with applicable law.

7. Cookies and tracking

We use basic analytics to understand how your page is used. If you enable optional tracking pixels (such as Meta or TikTok) on your own page, those third parties' own privacy practices apply to data collected through those pixels — enabling them is your choice as the page owner.

8. Children's privacy

Ringo Connect is not directed at children, and our Terms require account holders to meet a minimum age requirement. If we learn we've collected personal data from a child in violation of this, we will delete it.

9. Your rights

Depending on applicable law, you may have the right to: access the personal data we hold about you, request correction of inaccurate data, request deletion of your account and associated data, object to certain processing, and request a copy of your data in a portable format. To exercise any of these rights, contact info@ringoconnectltd.com. Once Cameroon's Data Protection Authority is operational, you may also have the right to lodge a complaint with it directly.

10. Changes to this policy

We may update this Privacy Policy as the product or applicable law changes. Material changes will be announced with reasonable notice where practical.

Contact

Questions about this policy, or to exercise your rights: info@ringoconnectltd.com.