Privacy Policy

1. Who we are

SOFTCODES LIMITED provides software solutions, technology consultancy, training, domain registration, hosting, customer support and related digital services. This policy explains how we handle information when you use softcodes.dev, the Softcodes customer portal or the Softcodes mobile application.

2. Information we collect

Depending on the features you use, we may collect:

• Account information such as your name, email address, telephone number and authentication details.
• Profile content, including a profile photograph when you choose to upload one.
• Order, invoice, wallet, payment-reference and transaction-status information. Payment credentials are processed by our payment provider and are not stored by Softcodes.
• Support messages and attachments, including photographs, files or voice notes that you voluntarily submit.
• Training, appointment, domain, hosting and service-request information.
• Device identifiers and push-notification tokens used to deliver account and service notifications.
• Technical information such as IP address, browser or device type, application version, diagnostic information and security logs.

3. How we use information

We use information to create and secure accounts, provide requested services, process and reconcile payments, maintain wallet and invoice records, respond to support requests, deliver notifications, prevent fraud, improve reliability and comply with applicable legal obligations.

4. Permissions and device features

The application may request notification, biometric, microphone or media access. These permissions are used only for the feature you choose—for example, biometric account access, a support voice note, a profile image or service notifications. You may manage permissions through your device settings.

5. Service providers and disclosures

We share only the information necessary to operate a requested feature. Providers may include PesaPal for payment processing, Google Firebase for authentication and push notifications, hosting and infrastructure providers, and domain-registration partners. We may also disclose information when required by law, to protect users or our systems, or as part of a business reorganisation subject to appropriate safeguards. We do not sell personal information.

6. Security and retention

We use reasonable administrative, technical and organisational measures to protect information. Information is retained only for as long as needed to provide services, maintain legitimate business and transaction records, resolve disputes, prevent abuse and meet legal obligations. No internet service can guarantee absolute security.

7. Your choices and rights

You may update your profile, manage device permissions and notification preferences, or request access, correction or deletion of eligible personal information. Some transaction and compliance records may need to be retained as required by law. To request account deletion or exercise a privacy right, contact us using the details below.

8. Children

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13 without appropriate authorisation. If you believe a child has provided information improperly, please contact us.

9. International processing

Service providers may process information outside Uganda. Where this occurs, we use appropriate contractual, technical or legal safeguards consistent with applicable data-protection requirements.

10. Changes to this policy

We may update this policy to reflect changes to our services, providers or legal obligations. The effective date above will be revised when material changes are published.