Twinsoft ERP Privacy Policy

1. Introduction

This Privacy Policy explains how Twinsoft Technologies PLC (“Twinsoft,” “we,” “us,” or “our”) collects, uses, stores, and protects information when you use the Twinsoft ERP mobile application available on the Apple App Store and/or Google Play Store (the “Service”).

Twinsoft ERP is a software application designed to help organizations manage sites, members, income records, expense records, and related business information. The Service is intended for gold mining organizations inside Africa.

This Privacy Policy applies to information processed through the Service. It does not cover information collected offline or through third-party websites, applications, or services that we do not control.

This document is provided for transparency. It does not constitute legal advice. We recommend that you review it carefully.

2. Who We Are

Twinsoft Technologies PLC
Ethiopia, Addis Abeba
Email: twinsoftplc1@gmail.com
Website: twinsoft-erp.tech

3. Scope of This Privacy Policy

This Privacy Policy covers information we collect when you:

• Create or use an account
• Join or manage an organization or site
• Create income or expense records
• Upload files or images
• Receive invitations
• Communicate with us
• Use the mobile application on your device

4. Information We Collect

We collect only the information needed to operate the Service.

Account Information
When you register or maintain an account, we collect your name, email address, email verification status, profile image (if you choose to provide one), account status information, and related timestamps.

Authentication and Session Information
We collect information necessary to authenticate you and maintain your session, including session identifiers, expiration information, IP address, device and browser/user-agent information, and the organization or site you are actively using.

Organization and Membership Information
We store organization names, logos (if provided), membership records, roles, permissions, and related timestamps so that organizations can manage their teams and access rights.

Invitation Information
When someone is invited to join an organization or site, we store the invitee’s email address, the role offered, invitation status, expiration date, and related details. This may include email addresses of people who do not yet have an account.

Site Information
We store site names, location information as provided by users, and related timestamps.

Income and Expense Records
Users may enter customer or vendor names, amounts, descriptions, payment methods (cash, bank, or other), entry dates, and related details. Payment images or other supporting files may also be uploaded.

Uploaded Files
When you upload files or images (including payment-related images), we store the files and associated metadata needed to manage them.

User Preferences
We store simple preferences such as theme selection (light, dark, or automatic).

Communications
We use your email address to send authentication-related and other transactional messages necessary to operate the Service (for example, account verification and invitations). We do not send marketing, promotional, or non-transactional emails.

Device and Technical Information
When you use the mobile application we may collect device-related information such as device model, operating system version, unique device identifiers, and app version. We also maintain server logs that contain only the data required to debug and operate the Service. These logs do not contain personal data.

We do not collect information for analytics, advertising, product improvement beyond core operation, or marketing purposes.

5. How We Use Information

We use the information we collect solely to:

• Provide, operate, and maintain the Service
• Authenticate users and manage sessions and security
• Enable organization, site, membership, role, and invitation features
• Allow users to create and manage income and expense records and related files
• Send necessary transactional and authentication-related emails
• Protect the security and integrity of the Service
• Respond to support requests

We do not use personal information for marketing, advertising, analytics, or any purpose beyond the core operation of the Service.

6. How We Share Information

We do not sell personal information.
We do not share personal information with third parties for their own purposes.

We use a limited number of service providers that process information on our behalf solely to operate the Service:

• Google authentication services (for user sign-in)
• Resend (for sending authentication-related and transactional emails)
• Hostinger (for hosting our virtual private server)

These providers process data only as necessary to provide their services to us. Our database and application data are stored on our virtual private server. Logging also occurs on our virtual private server.

Within an organization, authorized members and administrators can access organization data, membership information, site data, income and expense records, and related files according to the roles and permissions set within the Service.

We may disclose information if required by applicable law or to protect the rights, safety, or security of Twinsoft, our users, or others.

7. Device Storage and Local Data

The mobile application stores authentication data and performance-related information on your device using secure local storage.

These technologies are used only to support core functionality. We do not use them for tracking, advertising, or analytics. You can clear this data by logging out or uninstalling the application.

8. App Permissions

The application may request permission to access your device’s camera or photo library so you can upload payment images or other files. You can deny these permissions; some features may then be unavailable.

9. Data Retention

We retain information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy.

Sessions and invitations expire over time and are deleted.
When you request account deletion, we will process the request as described below.

10. Account Deletion and Data Deletion

You may request deletion of your account by contacting us at twinsoftplc1@gmail.com.

We will process account deletion requests in accordance with applicable law. Organization-owned data (such as income and expense records created within an organization) is controlled by the organization and is not automatically deleted when an individual member’s account is removed.

11. Your Rights

Depending on applicable law, you may have rights regarding your personal information.

To exercise any rights, contact us at twinsoftplc1@gmail.com. We will respond in accordance with applicable law.

12. Children’s Privacy

The Service is not directed to children. We do not knowingly collect personal information from children.

13. International Data Transfers

Personal information is stored on our virtual private server. We do not transfer personal data outside this environment for processing or storage.

14. Security

We implement reasonable technical and organizational measures designed to protect information against unauthorized access, loss, or alteration.

No method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

15. Security Incidents

We maintain internal procedures to detect, investigate, and respond to security incidents in order to help prevent and address data breaches.

16. Third-Party Links and Services

The Service may contain links to or integrations with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies.

The application is distributed through the Apple App Store and/or Google Play Store. Those platforms have their own privacy policies that apply to the download and installation process.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in order to clarify it, to reflect any changes to the Service, or to comply with legal obligations.

The “Last Updated” date at the top of this policy indicates the last revision, which is also the effective date of those changes. We give you access to archived versions of this policy so you can review the changes.

18. Contact Us

For privacy-related questions or requests, contact:

Twinsoft Technologies PLC
Ethiopia, Addis Abeba
Email: twinsoftplc1@gmail.com
Website: twinsoft-erp.tech