Privacy policy

Effective 31 October 2026 Who we are Rano Software operates ranosoftware.com, a portal for business agents to apply to our partner programme and submit customer application requests. Contact us about privacy at ranosoftware@gmail.com. Information we collect We collect account and contact details, company and CAC registration information, directors’ dates of birth, nationality, residential and contact details, identity document numbers, camera-captured director passport photos and uploaded or camera-captured customer passport photos, application details, selected designs, uploaded identity and address documents, signed agreements, review decisions and correspondence. When an agent submits a customer's information, we also receive that customer's business and contact details and supporting documents. Agents must have permission and an appropriate legal basis to provide this information. We process authentication records, IP addresses and technical request/security logs needed to operate and protect the portal. Passwords are handled by our authentication provider. We do not ask for bank-card details or collect payments in this portal's current onboarding process. How we use information We use this information to create and secure accounts, review business identity and eligibility, request corrections, manage customer applications, prepare approved requests for building, provide support, investigate misuse and keep review records. Approval is a separate company review; creating an account does not automatically approve an agent or customer. Documents are manually reviewed; this portal does not automatically verify them against government registries. Our purposes include steps requested before providing a service, managing our relationship with agents and customers, protecting the service and meeting applicable obligations. Where processing requires consent, you may withdraw it by contacting us; this does not change processing already lawfully carried out. Required application information may be necessary for us to continue a review. Storage and service providers Supabase provides authentication and the database holding account, application, review and document-metadata records. Cloudflare hosts the website and privately stores uploaded PDFs and images in R2. Our email delivery provider, Brevo, processes addresses and email content for account confirmation and recovery. Providers receive information needed to deliver their services. Hosting or processing may take place outside your country; contact us for information about the arrangements relevant to your application. Access and sharing Authorised company reviewers can access submitted applications and their documents. An agent can access their own applications and the customer applications they submit. Uploaded identity documents are not made publicly accessible. We may disclose information when required by law or when necessary to investigate fraud, protect rights or respond to valid legal requests. We do not sell personal information or use this portal's KYC documents for advertising. Retention We keep information for the purposes described here, including active applications, our service relationship, review history, dispute handling and applicable record-keeping obligations. We review deletion requests individually, including whether records must be retained for a specific obligation. Contact us to request deletion or information about retention for your application. Documents are not promised to disappear automatically when a review is rejected or an account stops being used. Cookies and device preferences The portal uses essential account-session cookies and saves your appearance preference on your device. These support sign-in, security and Light, Dark or System appearance. We do not use advertising-tracking cookies in this portal. Your choices and rights You may request access, correction, deletion or information about how your data is used, and exercise other rights available under applicable law, by emailing ranosoftware@gmail.com. We may need to verify your identity and may explain a lawful reason when we cannot complete a request. Customers whose details were submitted by an agent may contact us directly. You may also raise a concern with the relevant data protection authority. Security and updates We use access controls, private document storage and administrator two-step verification. No internet service can promise absolute security. Please keep account credentials private and report suspected misuse promptly. If this notice changes, we will publish the updated notice here with its effective date.