COLLECTLY PRIVACY POLICY

Last Updated: July 14, 2026

This Privacy Policy explains how Fixia Limited ("Collectly", "we", "us", or "our") collects, uses, and protects information when you use the Collectly website, mobile applications, and related services (collectively, the "Platform").

1. INFORMATION WE COLLECT

• Account information: name, email address, password (hashed), and business details you provide when creating a workspace.
• Invoice and customer data: invoice line items, amounts, due dates, bank account and payment link details you attach to invoices, and the name/email/phone of Customers you invoice.
• Payment records: payment status, receipts, and transaction references. Collectly does not store card numbers or bank login credentials — these are handled directly by our payment processor, Paystack.
• Uploaded files: business logos and payment receipt images, stored via Cloudflare R2.
• Device information: device identifier and push-notification token, used solely to deliver notifications about invoice activity.
• Usage data: log data such as IP address, browser/device type, and pages or features accessed, used for security and reliability.

2. HOW WE USE YOUR INFORMATION

• To provide and maintain the Platform, including generating invoices and tracking payment status.
• To send transactional emails and push notifications (invoice sent, invoice viewed, payment confirmed, reminders) related to your account or invoices.
• To detect and prevent fraud, abuse, and security incidents.
• To improve and develop new features.
• To comply with legal obligations.

3. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We share information only with:

• Payment processors (e.g. Paystack) to process online payments you or your Customers initiate.
• Infrastructure providers (e.g. Cloudflare R2 for file storage, our email delivery providers, and Firebase for push notifications) who process data on our behalf under confidentiality obligations.
• Law enforcement or regulators where required by law.
• A Business's own Customers, to the extent necessary to deliver an invoice (e.g. the Business's name and bank details appear on the invoice sent to a Customer).

4. DATA RETENTION

We retain account and invoice data for as long as your account is active, and for a reasonable period afterward as needed to comply with legal, accounting, or tax obligations. You may request deletion of your account and associated data, subject to any records we are legally required to retain.

5. YOUR RIGHTS

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

6. DATA SECURITY

We use industry-standard measures — including encrypted transport (HTTPS), hashed passwords, and signed request authentication between our applications and backend — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. CHILDREN'S PRIVACY

The Platform is not directed at individuals under the age of 18, and we do not knowingly collect personal information from children.

8. INTERNATIONAL DATA TRANSFERS

Our infrastructure providers may process and store data in countries other than your own. Where this occurs, we take reasonable steps to ensure your information receives an adequate level of protection.

9. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or by email. Continued use of the Platform after a change takes effect constitutes acceptance of the revised policy.

10. CONTACT US