Privacy Policy
Last updated: April 2026
1. Data We Collect
We collect: account information (name, email, password hash), organization data (company name, address, TIN), and financial data you enter (invoices, payments, contacts, employees). We also collect login timestamps and IP addresses for security.
2. How We Use Data
Your data is used solely to provide Tugye Accounting services. We do not sell, rent, or share your data with third parties. We may send transactional emails (invoices, receipts, alerts) to email addresses you provide.
3. Data Storage
Data is stored securely on Supabase (PostgreSQL) hosted in the EU (aws-eu-north-1). All connections use TLS encryption. Passwords are hashed with bcrypt (12 rounds).
4. Data Retention
Your data is retained for as long as your account is active. You can export your data at any time via the Backup feature. Upon account deletion, all data is permanently removed within 30 days.
5. Cookies
We use essential cookies for authentication (NextAuth session token). We do not use tracking cookies, analytics, or advertising cookies.
6. Your Rights
You have the right to: access your data (via export), correct your data (via edit features), delete your data (contact support), and restrict processing. Contact info@tugye.com for any data requests.
7. Security
We implement: TLS encryption, bcrypt password hashing, rate limiting, RBAC, server-side validation, database transactions, and audit logging. Report security issues to info@tugye.com.
8. Contact
Tugye Consults Ltd, P.O. Box 29913, Kampala, Uganda. Email: info@tugye.com. WhatsApp: +256 774 737 028.