Privacy Policy

Gemmy Connect Ltd ("Gemmy Connect", "OneGemmy", "we", "us", or "our") respects your privacy and is committed to protecting personal data.

This Privacy Policy explains how we collect, use, store, share, and protect personal information when you access or use OneGemmy, our business management platform, including our website, web application, mobile applications, and related services.

By using OneGemmy, you acknowledge the practices described in this Privacy Policy.

1. About OneGemmy

OneGemmy is a business management platform provided by Gemmy Connect Ltd, a company based in Rwanda.

Businesses can use OneGemmy to manage activities such as sales, customers, inventory, expenses, accounting records, employees, reporting, and other business information.

Because OneGemmy is a multi-tenant platform, each business operates within its own account and workspace.

2. Our role when processing data

The role Gemmy Connect plays depends on the type of information involved.

For information you provide directly to us when creating an account, communicating with us, or using our services, Gemmy Connect determines how that information is processed.

When a business uses OneGemmy to store information about its customers, employees, suppliers, transactions, or other business activities, we generally process that information on behalf of that business and according to its instructions.

If your personal information has been entered into OneGemmy by a business that you interact with, you should normally contact that business first if you wish to access, correct, or delete that information.

3. Information we collect

Depending on how you use OneGemmy, we may collect:

• Account and profile information, including your name, email address, phone number, business name, role, and account credentials.
• Business information, including customer records, products, inventory, sales, invoices, expenses, suppliers, employees, accounting information, and other information entered into the platform.
• Technical and usage information, such as IP address, device type, browser type, operating system, login activity, timestamps, application activity, and diagnostic information.
• Communications, including information you provide when contacting our support, sales, or other teams.
• Payment and subscription information, where applicable, including information required to manage subscriptions, billing, and payment status. Payment information may also be processed by third-party payment providers.

We only seek to collect information reasonably necessary to provide, secure, support, and improve our services.

4. How we use information

We may use information to:

• provide and operate OneGemmy;
• create and manage user and business accounts;
• authenticate users and protect accounts;
• process subscriptions and service-related transactions;
• provide customer support;
• maintain separation between business accounts;
• detect fraud, misuse, unauthorized access, and security threats;
• monitor reliability and improve platform performance;
• develop and improve OneGemmy features;
• communicate important service, security, and account updates;
• comply with applicable legal and regulatory obligations; and
• protect the rights, property, and security of Gemmy Connect, our customers, and users.

Where we use aggregated or anonymized information for analytics or product improvement, we aim to ensure that the information does not directly identify an individual.

We do not sell personal information or customer business data.

5. Business customer data

Businesses using OneGemmy remain responsible for the personal information they collect and enter into the platform.

A business using OneGemmy should ensure that it has an appropriate legal basis or authorization to collect and process information about its customers, employees, suppliers, and other individuals.

Gemmy Connect processes such information as necessary to provide theOneGemmy service and according to the applicable agreement with the business.

We do not use one business's confidential business data for the benefit of another business.

6. Data separation and security

OneGemmyis designed to keep each business's data logically separated from the data of other businesses using the platform.

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include access controls, authentication, encryption where appropriate, monitoring, backups, and security practices within our infrastructure.

However, no online service or method of electronic storage can guarantee absolute security.

Users are also responsible for maintaining the confidentiality of their account credentials and for notifying us if they suspect unauthorized access to their account.

7. When we share information

We may share information with trusted service providers that help us operate OneGemmy, such as providers of cloud infrastructure, communications, analytics, security, customer support, and payment services.

These providers should only receive information reasonably necessary to perform services on our behalf and are expected to handle it appropriately.

We may also disclose information where required to:

• comply with applicable law, regulation, court order, or lawful government request;
• investigate fraud, security incidents, or misuse;
• enforce our agreements or protect our legal rights;
• protect users or the public from harm; or
• support a merger, acquisition, restructuring, financing, or transfer of all or part of our business, subject to appropriate safeguards.

We do not sell customer databases to advertisers or data brokers.

8. Data retention

We retain personal and business information for as long as reasonably necessary to provide OneGemmy and fulfill the purposes described in this Privacy Policy.

When an account is closed or data is no longer required, we may delete or anonymize it within a reasonable period, subject to backup cycles and any legal, regulatory, tax, accounting, fraud-prevention, or security requirements that require us to retain certain information for longer.

9. Your rights and choices

Depending on applicable law and the circumstances, you may have rights relating to your personal information, including the ability to request access, correction, deletion, or other appropriate action concerning your information.

Account holders may be able to manage certain information directly through OneGemmy.

You may also contact us at info@gemmyconnect.com.

If your information was collected and entered into OneGemmy by a business using our platform, please contact that business first. Because that business controls its records, we may need to refer your request to it.

We may need to verify your identity before processing certain requests.

10. Cookies and similar technologies

Our websites and applications may use cookies or similar technologies where necessary to maintain sessions, remember preferences, improve functionality, understand service usage, and protect accounts.

Where required by applicable law, we will provide appropriate choices regarding non-essential cookies.

11. International data processing

Gemmy Connect is based in Rwanda, while some of the technology and service providers supporting OneGemmy may operate infrastructure in other countries.

As a result, information may be processed or stored outside the country in which it was originally collected.

Where required, we take reasonable steps to ensure that appropriate protections are applied when personal information is transferred internationally.

12. Children's privacy

OneGemmy is designed primarily for businesses and their authorized users and is not intended for children to create independent business accounts.

If we become aware that personal information relating to a child has been collected in circumstances where appropriate authorization was required but not obtained, we will take appropriate steps in accordance with applicable law.

13. Third-party services

OneGemmy may integrate with or contain links to third-party services.

Those services may have their own privacy policies and data-handling practices. This Privacy Policy does not govern how independent third parties process information outside OneGemmy.

We encourage users to review the privacy policies of relevant third-party services.

14. Changes to this Privacy Policy

We may update this Privacy Policy as OneGemmy evolves or as legal, regulatory, security, or operational requirements change.

When we make changes, we will update the "Last updated" date at the top of this page.

If changes materially affect how we process personal information, we may provide additional notice through OneGemmy, by email, or through another appropriate communication channel.

15. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or how OneGemmy handles personal information, please contact:

Gemmy Connect Ltd
Kigali, Rwanda
Email: info@gemmyconnect.com
Website: https://app.gemmyconnect.com