Privacy Policy

1. Introduction

CT&A Solutions Ltd ("we", "us", "our") operates Vantedge, a cloud-based business management platform available at myvantedge.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

2. Information We Collect

We collect information you provide directly, including:

• Account Information: Name, email address, company name, phone number, and login credentials.
• Business Data: Employee records, payroll data, financial transactions, invoices, bills, inventory records, work orders, and customer/vendor information you enter into the platform.
• Payment Information: Billing details processed through our payment provider (Stripe). We do not store full credit card numbers on our servers.
• Communications: Messages sent through integrated services (WhatsApp, email) and support correspondence.
• Usage Data: Log data, device information, browser type, and interaction patterns collected automatically.

3. How We Use Your Information

• To provide and maintain the Vantedge platform and its features.
• To process payroll, generate reports, and manage business operations as directed by you.
• To send transactional communications (payslips, invoices, notifications) on your behalf.
• To integrate with third-party services you authorize (QuickBooks Online, WhatsApp via Twilio, Google Authentication).
• To improve our services, fix bugs, and develop new features.
• To comply with legal obligations and enforce our terms.

4. Third-Party Integrations

Vantedge integrates with the following third-party services when you choose to connect them:

• QuickBooks Online (Intuit): When connected, we transmit payroll journal entry data to your QuickBooks account. We store OAuth tokens securely to maintain the connection. You can disconnect at any time.
• Twilio (WhatsApp): When enabled, we send WhatsApp messages on your behalf to phone numbers you provide (employee payslips, customer notifications).
• Stripe: Payment processing for subscriptions. Stripe handles all card data per PCI DSS standards.
• Google: Optional social login authentication.

Each third-party service has its own privacy policy. We encourage you to review them.

5. Data Storage and Security

• Your data is stored on secure cloud infrastructure using MongoDB Atlas with encryption at rest and in transit.
• We use HTTPS/TLS for all data transmission.
• Access to production systems is restricted to authorized personnel only.
• Passwords are hashed using bcrypt and never stored in plain text.
• We implement role-based access controls within the platform.

6. Data Retention

We retain your business data for as long as your account is active. Upon account termination, we will delete your data within 90 days unless retention is required by law. You may request data export or deletion at any time by contacting us.

7. Your Rights

You have the right to:

• Access, correct, or delete your personal data.
• Export your business data in standard formats (CSV, Excel, PDF).
• Disconnect any third-party integration at any time.
• Withdraw consent for optional data processing.
• Request information about how your data is processed.

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

9. Children's Privacy

Vantedge is a business management platform not directed at individuals under 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or a prominent notice on the platform.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: