Your data deserves clear, careful handling.

This Privacy Policy explains how Instalify collects, uses, shares, protects, and retains information when you visit the website, create an account, complete onboarding, manage a business, or use dashboard features.

Instalify is designed for business management. The information processed in the platform may include business, branch, staff, customer, inventory, sales, installment, accounting, and support-related records.

We may collect account information such as name, email address, phone number, password authentication status, OTP verification status, role, permission level, business ownership status, and login/session information.

We may collect business information such as business name, business type, logo, country, region, city, address, timezone, currency, branch details, staff records, customer records, suppliers, products, stock, invoices, payments, reports, and accounting entries that users enter into the platform.

We may automatically collect technical information such as device type, browser, IP address, approximate location, session activity, diagnostic logs, performance events, and security signals needed to protect and operate the service.

We use information to create and secure accounts, verify email access, onboard businesses, manage branches and users, provide dashboards, process sales and installment workflows, generate reports, support accounting records, and operate product features.

We also use information to maintain security, prevent misuse, troubleshoot errors, improve performance, respond to support requests, send service messages, enforce terms, and comply with legal or operational obligations.

Instalify uses Supabase Auth for authentication and email OTP verification. Authentication providers process login identifiers, session tokens, verification events, and related security information needed to sign users in safely.

Users should protect OTP codes and login credentials. Instalify will never ask users to share passwords or OTP codes through unofficial channels.

Instalify may use cookies, local storage, session storage, and similar technologies to keep users signed in, remember preferences, support security checks, maintain theme/language choices, and improve service reliability.

Browser settings may allow you to restrict cookies or storage, but disabling them may prevent authentication, dashboard access, or other core features from working correctly.

We do not sell business records or customer records. Information may be shared with service providers that help deliver authentication, hosting, database, storage, infrastructure, analytics, support, security, or communication functions.

Information may also be shared when required to comply with law, enforce agreements, protect rights and safety, investigate abuse, respond to legal process, complete business transfers, or with your direction through product features.

Instalify uses reasonable technical and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These safeguards may include role-based access, authentication controls, secure infrastructure, and operational monitoring.

No method of transmission or storage is completely secure. Business owners and administrators should assign roles carefully, remove inactive users, use strong passwords, protect devices, and train staff on secure handling of customer and financial records.

We retain information for as long as needed to provide the service, maintain business records, support account recovery, comply with legal or accounting obligations, resolve disputes, prevent misuse, and maintain backups.

Some deleted or changed information may remain temporarily in logs, backups, audit trails, or archived systems before being removed according to operational retention practices.

Depending on your location and relationship with Instalify, you may have rights to access, correct, export, delete, restrict, or object to certain processing of personal information. Requests should be made through the official support channel.

Business workspace data may be controlled by the business owner or administrator. Staff and customers may need to contact the relevant business directly for requests involving records managed inside that business workspace.

Instalify is intended for business users and is not directed to children. Users should not knowingly provide information from children where parental consent or other legal requirements would apply.

If you believe a child's personal information has been entered into Instalify without proper authority, contact the relevant business administrator or Instalify support so the issue can be reviewed.

Instalify may process and store information using service providers and infrastructure that operate in different locations. By using the platform, you understand that information may be transferred and processed outside your region where permitted by applicable requirements.

Businesses are responsible for ensuring their use of Instalify complies with local privacy, employment, consumer, tax, accounting, and data protection obligations that apply to their operations.

This Privacy Policy may be updated to reflect product, legal, security, or operational changes. The updated date will show when the policy was last revised.

Questions or privacy requests should be sent through the official Instalify support channel available in your account or onboarding communications. This policy should be reviewed by qualified legal counsel before production use in a specific jurisdiction.