Privacy Notice

Altera Group of Machimbo Street, Tabata Chang'ombe, P.O. Box 79564, Dar es Salaam, Tanzania ("we") provides Altera ERP and is the data controller for the personal data described here: we decide why and how it is processed. For business records that customers enter about their own clients and suppliers, we process that data on the customer's behalf.

Data we collect and why

• Account details (name, email, password): to create and secure your account and provide the Service. Basis: contract.
• Business details (business name, address, phone, tax number): to show on your workspace and invoices. Basis: contract.
• Business records you enter (products, orders, customer and supplier contacts, invoices): to provide the Service. Basis: contract.
• Support messages: to answer your questions. Basis: contract and legitimate interests.
• Usage and device data (IP address, browser, log data): for security, fraud prevention and improving the Service. Basis: legitimate interests.

Who we share it with

• Service providers that host and run the Service (hosting, database, email delivery), under confidentiality obligations.
• Paddle.com, our Merchant of Record, for selling subscriptions, managing payments and subscriptions, tax compliance and invoicing.
• Professional advisers such as lawyers and accountants.
• Authorities, where the law requires it.

We do not sell your personal data.

How long we keep it

We keep data while your account is active. After an account closes we delete or anonymise it within 90 days, unless we must keep some records longer by law (for example, tax records).

Your rights

Under the Personal Data Protection Act of Tanzania and other applicable laws, you can ask to access, correct or delete your personal data, object to or restrict certain processing, and withdraw consent where we rely on it. You can also complain to the Personal Data Protection Commission. To use these rights, or for any questions about this notice, email alteragroup.tz@gmail.com.

Security

We use appropriate technical and organisational measures, including encrypted connections, access controls and separation of each business's data.

Cookies

We use only essential browser storage needed to keep you signed in. We don't use advertising cookies.