Home
Product
Solution
About
FAQs
Contact
Get Notified

Privacy Policy

Soma Ops is engineered with data protection by design. We handle your business and customer information responsibly in compliance with the Ghana Data Protection Act and international privacy standards.

Information We Collect

  • Business & Account Data:Organization profile information, authorized administrator email addresses, team member roles, and account preferences.
  • Customer & Operations Records:Customer conversations, order statuses, delivery details, non-card transaction records, and operational alerts processed inside your Soma Desk workspace.
  • System & Activity Audit Logs:Automated logs tracking system actions, task outcomes, and escalation histories to ensure security oversight and operational accountability.

How We Protect Your Data

  • Database Row-Level Isolation:Strict Row-Level Security (RLS) ensures complete data separation between businesses, preventing any unauthorized cross-tenant data access.
  • Strong Encryption:All data in transit over network connections and stored at rest is secured with industry-standard 256-bit AES encryption.
  • PCI-DSS Compliant Payments:Card processing is handled by Paystack (PCI-DSS Level 1 certified). Payment card numbers are never received or stored on Soma Ops servers.

Your Rights & Control

  • Access & Data Correction:You have full access to view, update, or rectify your business profile data, employee access levels, and active operational settings.
  • Data Export & Portability:You can export customer records, conversation logs, and operational reports at any time.
  • Integration Control:You can connect or disconnect third-party tools (such as Google Workspace or WhatsApp) whenever you choose.

Cookies, Storage & Data Retention

We use essential browser cookies and local storage to manage user authentication and save workspace preferences. For a complete list of cookies and storage tools used, visit our dedicated Cookie Policy.

Operational data is retained during your active subscription to maintain service continuity and legal compliance, after which data is archived, minimized, or securely deleted.