Who holds your data

Pancho runs this platform and every app on it, and is the controller of the account, billing and app data described here, whichever app you signed up through.

What we store

Your account details (name, email, phone if you gave one, and your country), your plans and billing history, the settings and content of the apps you use, and your support messages. Card numbers never touch our servers. They go straight to the payment processor (Stripe or Paystack, depending on your currency), and we keep only the last four digits and the expiry so you can recognise your card.

What we use it for

Running your account and your apps, taking the payments you have agreed to, answering your support messages, and the service emails that come with an account: receipts, renewal notices and security notices. We do not sell your data, and we do not use it to advertise to you.

Who else sees it

Outside Pancho, only the processors the service cannot run without: our payment providers (Stripe, Paystack), our email delivery provider, and our certificate authority (Let's Encrypt) for web addresses. Each receives the minimum it needs.

Inside the platform, two more. If an app has an app manager, they can see the accounts of that app's users and the support messages sent about it. If you joined through an affiliate's link, that affiliate sees your name, the app you joined, your plan and what it costs, with your email address partly hidden. They never see your card, your content or anything else in your account.

That's the whole list.

How long we keep it

While your account stands, plus what tax and payment rules require afterwards: billing records are kept for seven years. Cancelled accounts keep their files for one hundred and eighty days, then the files are archived and removed.

Your rights

You can download everything we hold about you from your account page, correct your details there, and ask us to delete your account, which we do, subject to the records the law makes us keep. Ask anything about your data from the Support page; a person answers.

Security and breaches

Data is encrypted in transit, access is limited to those who need it, and if a breach ever puts your data at risk we will tell you without undue delay after we become aware of it.

Children

The platform is for people who can enter into a contract, and is not directed at children.

Changes

When this policy changes in a way that matters, we tell you on the platform. The version and date at the top are the record.