Privacy Policy
1. Who we are
Proqal Softwares is a registered trade name of Proem Engineering, a software engineering company founded in 2026. We operate proqalsoftwares.com and the Proqal Finance, PROQAL POS and PROQAL Loans products. For any privacy question, contact [email protected] — a person reads that address, and we aim to reply within a few working days.
2. Two different roles
We handle two kinds of information, and our responsibilities differ for each.
- Your account information — we are the controller. This is the data you give us to create and run a workspace.
- Your business records — the customers, suppliers, invoices, employees and transactions you enter into the product. We are a processor: it is your data, we hold it on your behalf, and we act on your instructions.
3. What we collect
- Account details — company name, your name, work email address and a hashed password.
- Billing details — plan, tier and subscription status. Card details are handled by PayPal and never reach our servers.
- Business records you enter — held in a database dedicated to your workspace.
- Technical records — IP address, browser type and timestamps, kept in server and audit logs to operate the service and investigate abuse.
- Device registration — for PROQAL POS, a till identity and device name so a register can be recognised and revoked.
We do not use tracking or advertising cookies. The cookies we set are strictly necessary: a session token that keeps you signed in, and a POS device cookie that identifies a registered till.
4. Why we use it
- To provide the service you have subscribed to.
- To authenticate you and protect accounts against unauthorised access.
- To take payment and manage your subscription.
- To send service messages such as invoices, statements and password resets that you or your workspace administrator trigger.
- To meet legal and accounting obligations.
We do not sell personal information, and we do not use your business records to train models.
5. Who we share it with
Only the providers needed to run the service: our hosting provider, our email delivery provider, and PayPal for payments. Each receives only what its function requires. We may disclose information where the law requires it.
6. Where it is stored
Data is stored on servers operated by our cloud hosting provider, DigitalOcean. Each workspace's records are held in a separate database rather than pooled with other customers', so one customer's data cannot be returned by a query belonging to another.
We serve customers in more than one country. Wherever you are, we apply the same handling described in this policy, and we comply with the data-protection law that applies to you — including the Botswana Data Protection Act, South Africa's POPIA, and the GDPR for customers in the European Economic Area. If a specific right in your local law is not listed in section 9, you still have it and we will honour it.
7. How long we keep it
Workspace data is retained for as long as your subscription is active. After cancellation we keep it for 90 days so you can reactivate or export it, after which it is deleted. Backups are held for 30 days and expire on a rolling basis, so a deleted workspace clears our backups within that window. Audit and accounting records may be kept longer where the law requires it. You can ask us to delete your data sooner — see section 9.
8. Security
Passwords are stored using bcrypt hashing and never in plain text. Access is protected by authentication tokens scoped to a single workspace, role-based permissions, rate limiting on sign-in, and encryption in transit (HTTPS). No system is perfectly secure, but we take these measures seriously and improve them continuously.
9. Your rights
You may request access to, correction of, or deletion of your personal information, ask for a copy in a portable format, or object to a particular use. Write to [email protected] and we will respond within 30 days. If your data was entered into a workspace by an employer or accountant, contact them first — they control that workspace.
10. Children
The service is for businesses and is not directed at anyone under 18.
11. Changes
We will post any change on this page and update the date above. Material changes will also be sent to workspace administrators by email.