Who we are
RevoPass is operated by Revo Space Enterprise Ltd, a company registered in Nigeria. We are the data controller for information about you as a RevoPass user.
Privacy questions and requests: support@revopass.ng.
What we collect from you
When you create an account we store your name, email address and, if you give one, your phone number. We store your password only as a hash — we cannot read it, and neither can anyone who obtains our database.
For your business we store the name, address, email, phone number, tax identification number, bank account details and logo you enter, because these appear on the invoices and receipts you issue.
We also record ordinary technical information such as sign-in times and IP addresses, which we use to keep accounts secure and to investigate problems.
Your staff
If you add staff, we store their name, email or phone number (if you give one), role, the branches they can work in, and how they sign in. A staff PIN is stored only as a hash — we cannot read it, and neither can you. Failed PIN attempts and temporary lockouts are recorded.
RevoPass keeps an activity log of important actions — sales, voids, refunds, discounts, stock and price changes, room charges, prescriptions and role changes — showing who did what, where and when. It is visible to people in your business who have permission to view it. If you use the HR tools, staff records such as attendance, leave and pay are held only for people with HR access.
You are responsible for telling your staff what you record about them and for having a lawful basis to do so.
Information you enter about other people
RevoPass lets you store records about your own customers and other people your business deals with. Depending on the modules you use, this can include:
- customers: name, email, phone or WhatsApp number, address and tax identification number;
- hotel guests: name, contact details, ID type and number, and their stays and charges;
- pharmacy patients: name, phone number, the prescriber and the medicines on a prescription, which is health-related information;
- fashion customers: body measurements and orders;
- electronics buyers: the serial number or IMEI of a unit and who bought it;
- receipts you photograph, which can show a merchant and what was bought.
For those records your business is the controller and RevoPass is the processor. We hold them on your behalf, we do not use them for our own purposes, and we do not contact your customers except to deliver a document you have chosen to send them. Making sure you are entitled to hold that information — and, for health-related and ID information, that you handle it with extra care — is your responsibility.
Camera and photographs
The RevoPass mobile app asks for access to your camera for two purposes: scanning a barcode, serial number or IMEI label, and photographing a receipt. It asks for your photo library only so you can attach a picture of a receipt to an expense. Nothing else uses them, and scanning does not save a photo. Receipt images are stored in a private location that only members of your business can open, and they are never made public.
RevoPass does not currently read your receipts automatically. The merchant, amount and VAT are the figures you type in.
Information stored on your device
The mobile app keeps your sign-in session in the phone’s secure storage (the keychain or Keystore). If you make a till sale or receive serialised stock without a connection, the app also saves that transaction in secure storage on the phone until it can be sent, then removes it. If you set up a shared till, the app remembers that the device is in that mode and the signed-in staff session.
Payments
Card payments — both your RevoPass subscription and any invoice your customer pays online — are processed by Squad, operated by Guaranty Trust Holding Company (GTCO). Card numbers are entered on Squad’s own secure page and never reach RevoPass. Their privacy terms apply to the payment itself.
What we keep is the amount, the currency, our own reference, the provider’s transaction reference, and whether the payment succeeded or failed. For a subscription we also keep which plan and add-ons it paid for. That is what lets us show you a payment history and reconcile a disputed transaction.
Cash, card-machine and transfer sales you record at the till are records you create; RevoPass does not process that money.
Where your data is stored
RevoPass runs on Supabase, which hosts our database and file storage. Our project is hosted in Frankfurt, Germany (the AWS eu-central-1 region). Every business’s records are separated at the database level so one business cannot read another’s.
Because the data is stored outside Nigeria, it is transferred abroad. We do this only to provide the service, and we rely on our hosting provider’s contractual data-protection commitments and security measures for the transfer. If you want more detail, contact us at support@revopass.ng.
How long we keep it
While your account is open we keep your records so the app can show them to you. Financial records are the point of the product, so we do not delete them on our own initiative. Switching a module off, or letting a plan or add-on lapse, hides the module but does not delete its records.
When you close your account your business and its records are hidden immediately and your login is deleted, so you can no longer sign in. The records are then held for a recovery period of up to 30 days, so that an accidental deletion can be undone, and afterwards they are removed for good. If your business has other members, closing your own account removes only you; the business and its records stay for the others.
We may keep limited information for longer where the law requires it, for example proof of payments made to us. You should check with your own accountant how long Nigerian tax law requires you to keep your business records, and keep copies yourself.
Your rights
Under the Nigeria Data Protection Act you may ask for a copy of the information we hold about you, ask us to correct it if it is wrong, ask us to delete it, and object to how it is used. Write to support@revopass.ng. You can also complain to the Nigeria Data Protection Commission.
If you are a customer, guest or patient of a business that uses RevoPass, that business holds your information; please contact it first.
You do not have to ask us to delete your account: you can do it yourself in Settings, on the web or in the mobile app.
Cookies and analytics
RevoPass sets cookies that keep you signed in. If you use a shared till, it also sets cookies that remember that the device is a till and which staff member is signed in. That is what they are for, and removing them signs you out.
We do not use third-party advertising or analytics trackers, and we do not sell your information or your customers’ information to anyone.
Changes to this policy
If we change this policy we will update the date at the top of this page. For a material change we will also tell you by email or in the app.