Privacy Policy

Soko Tally (this site), the Soko marketplace, the Soko dashboard, and the Soko mobile app are built and operated by InnInk Limited ("InnInk", "we", "us"). This policy explains what we collect, why, and what choices you have — whether you're a shopper browsing the Soko marketplace, a customer of a business that uses Soko, or staff at a business running Soko for their own operations.

Soko is a multi-tenant platform: each business ("tenant") that runs on Soko manages its own stock, sales, and customer records. Where a tenant business is the one deciding how your data as their customer is used (for example, what's on your receipt or invoice), that business is the data controller for that information and InnInk processes it on their behalf. For your account itself — the login you use across every store on Soko — InnInk is the controller.

• Account information: name, phone number and/or email, and password (stored hashed, never in plain text) when you create a customer, supplier, or staff account.
• Order and invoice history: what you bought or were billed for, from which store, and when — scoped to the store(s) you've actually dealt with.
• Payment information: we never see or store your card, mobile money PIN, or bank details directly. Payments are handled by our payment partners (Stripe, GoCardless, Paystack, Flutterwave, Hubtel, and mobile money networks depending on your region) — we only receive confirmation that a payment succeeded and a reference number.
• Device and usage data: basic technical data (device type, app version, crash logs) from the Soko mobile app and dashboard, used to keep the app working and fix bugs — not for advertising.
• Location: only if you use a feature that needs it (for example, a delivery address you enter yourself). We do not track background location.

• To run your account, process orders/invoices, and show you your own purchase history.
• To let a business you've bought from serve you — fulfilling orders, issuing receipts, following up on an invoice.
• To detect fraud, keep the platform secure, and enforce our terms.
• To send transactional messages (order confirmations, payment receipts, invoice reminders) — not marketing, unless you've opted in separately with a specific store.
• To improve Soko itself — aggregated, de-identified usage patterns only.

We do not sell your data. We share it only with:

• The specific store(s) you've placed an order with or bought from — never with a store you haven't dealt with.
• Payment processors (Stripe, GoCardless, Paystack, Flutterwave, Hubtel, mobile money networks) strictly to complete a transaction you initiated.
• Infrastructure providers (hosting, email/SMS delivery) who process data on our behalf under contract, and only for that purpose.
• Authorities, only where we're legally required to.

If you're in the UK, you have rights under UK GDPR — including access, correction, deletion, and portability of your data. If you're in Ghana, equivalent rights apply under the Data Protection Act, 2012 (Act 843). To exercise any of these, email support@sokotally.com and we'll respond within 30 days.

Deleting your Soko account removes your login and profile, but a business you transacted with may be legally required to keep records of that transaction (for accounting/tax purposes) independently of your account.

• Camera: to scan barcodes/QR codes for stock and checkout — only used when you open a scanner, never runs in the background.
• Storage: to save and share invoice/receipt PDFs you generate.
• Notifications: for order, invoice, and low-stock alerts you're a party to.

Soko is a business tool and is not directed at, or knowingly used to collect data from, children under 16.

We'll update the date below whenever this policy changes, and post material changes on this page before they take effect.

Questions about this policy or your data: support@sokotally.com · InnInk Limited