Roles
Your organisation is the controller of the personal data in its account: staff, buyers and other people in your records. Fincount is the processor and handles that data only on your documented instructions.
What we process and why
Names and phone numbers of staff and buyers, videos and photos of fish and basins, counts, sizes, weights, batches, sales and certificates. We process them to provide Fincount to you, as the terms of service describe.
Training use
We use your videos to train Fincount AI only with your written opt in. If you withdraw, we stop future use and remove your videos from the next training set. Faces found in any training video are blurred before anyone labels it.
Security
We use encryption in transit, storage with no public access, short lived links, signed certificates, access checks by organisation and role, and an audit log. People who work for Fincount are bound by confidentiality.
Sub processors
Amazon Web Services provides storage, computing, signing keys, email and sign in for managers through Amazon Cognito. A messaging provider sends WhatsApp and text messages you ask for. We tell you before adding a sub processor that handles your personal data.
Transfers
Product data is stored in the AWS Africa (Cape Town) Region. Where data is processed elsewhere, we record the legal basis for the transfer.
Helping you meet your duties
We help you answer requests from people about their data, and we tell you without delay if we learn of a breach affecting your data, so that you can meet the 72 hour notice rule.
When the agreement ends
You can ask us to return or delete your data when you stop using Fincount. We delete it unless the law requires us to keep it, and certificates already issued stay checkable by their fingerprints.
