Privacy Policy

1. What we collect

• Account details: name, email address, phone number, country, company name, display currency, theme and notification preferences, and whether you accepted the terms (version and time).
• Sign-in data: a hashed password, authenticator settings if you enable them, Google account identifier if you sign in with Google, session records (time, device type, approximate location from IP address).
• Billing data: invoices, payment references and status returned by the payment provider. We never store full card numbers or mobile-money PINs.
• Service data: the servers, websites, systems and licences on your account and the telemetry needed to run them (status, usage and health). Content you store inside your own services is yours and we access it only to support you or as the law requires.
• Support data: tickets, chat conversations and messages sent through an engineer’s public link, including the name and phone number a visitor gives before starting a chat on a site that uses our widget.
• Audit data: a log of actions taken on your account (who, what, when) that protects both you and us.

2. Why we use it

• to create and secure your account and deliver the services you order (performance of our contract with you);
• to invoice you, collect payment and keep the accounting records the law requires;
• to answer support requests and let the engineer assigned to you contact you;
• to send service messages such as renewal reminders, incident notices and receipts, and, only if you opt in, product updates;
• to detect abuse, fraud and security incidents and to keep an audit trail (our legitimate interest in a safe platform).

We do not sell personal data and we do not use it for third-party advertising.

3. Who sees it

Scon staff see only what their role needs: engineers see the services they work on, support staff see tickets and chats, finance staff see billing. Every access is logged. If you run a website chat widget, you and Scon staff both see the same conversations with your visitors. We share data with service providers that help us run the platform (email delivery, payment processing, cloud and connectivity suppliers) under contracts that restrict them to our instructions, and with authorities where a law or court order requires it.

4. Where it is kept and how it is protected

Data is stored on infrastructure operated or contracted by Scon and protected with encryption in transit, encrypted storage of secrets, scoped access tokens, isolated customer accounts, backups and monitoring. No system is perfectly secure; if we discover a breach that affects you, we will tell you without undue delay and explain what happened and what we are doing.

5. How long we keep it

• Account and service data: for as long as the account or service is active, and then 30 days after cancellation or closure, after which it is deleted together with backups that belong only to that service.
• Invoices, payments and audit records: for the period required by accounting and tax law, typically up to 7 years.
• Support conversations: for as long as your account exists, so that history is available to you and to the engineer helping you.
• Session and security logs: up to 12 months.

6. Cookies and local storage

We use a session cookie to keep you signed in and browser storage for preferences such as theme, sidebar state and, on sites that embed our chat widget, a visitor token so that a returning visitor sees their earlier conversation. We do not use third-party tracking cookies on the platform.

7. Your choices and rights

You can view and update your account details, change notification preferences, and close your account from the dashboard. Depending on the law that applies to you, you may also have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. To exercise a right, write to support@scon.ug; we will respond within a reasonable time and may ask you to verify your identity first.

If you are a visitor who chatted with a business through our widget, contact that business or write to us and we will help.

8. Children

Scon is a business service and is not directed at children under 18. We do not knowingly collect their data; if you believe a child has created an account, tell us and we will remove it.

9. Changes to this policy

We may update this policy. The version at the top of this page matches the terms version recorded on your account; we will notify you of material changes through your dashboard or email before they take effect.

10. Contact and governing law

Shift Connect Solutions Limited, trading as Scon. Privacy questions: support@scon.ug. This policy is governed by the laws of the Republic of Uganda, including the Data Protection and Privacy Act, 2019, without limiting any rights you have under the laws of your own country.