Privacy Policy

Packaged is operated by Premier Tech Lab, a software engineering company based in Accra, Ghana. Where this policy says "we", it means Premier Tech Lab acting as the operator of Packaged.

This distinction matters more than anything else in this policy.

Your data. The account you open with us — your name, email, business details, billing information and how you use the product. We decide what happens to this, and this policy covers it.

Your clients' data. Everything you put into Packaged about the people you serve — their contact details, invoices, files, messages and payment records. That is yours to control, not ours. We store and process it on your instruction so the product works. We do not decide what goes in, we do not use it for our own purposes, and we do not sell it or use it to train anything. Your own agreement with your clients governs what you may collect from them.

• Account details — your name, email address, password (stored only as a cryptographic hash, never readable by us), business name, and anything else you choose to add such as a logo, address or tax number.
• Billing details — your plan, what you have paid, and an identifier from our payment provider. We never see or store your full card number.
• Usage — which parts of the product you use, so we know what to improve and what is broken.
• Technical records — error reports and security events such as sign-ins from a new device.

• Running the product and keeping your account working.
• Taking payment for your plan and telling you about it.
• Support — answering you, and diagnosing a problem you have reported.
• Security — spotting misuse, and protecting accounts from takeover.
• Improving Packaged, using aggregate patterns rather than the contents of anyone's workspace.

We do not sell your data, we do not rent it to advertisers, and we do not use what is inside your workspace to train machine-learning models.

Packaged is built on services that each handle one part of the job. Each is bound to use the data only to provide that service.

• Amazon Web Services — the servers and storage that hold your workspace. The database, the sign-in system and every file you or your clients upload live there, in Amazon's Oregon region in the United States. We run that database and sign-in system ourselves rather than buying them from anyone; Amazon provides the machines and the disks underneath.
• Vercel — hosting, which serves the application itself.
• Stripe — payments for your Packaged plan, and card payments from your clients where you use it.
• Paystack — payments from your clients in African currencies, where you use it.
• Resend — sending email. If you connect your own sending account, client email goes through yours instead.
• Sentry — error reporting. Text is masked in session recordings and personal details are not attached to error reports.
• PostHog — product analytics, limited to deliberate events rather than recording everything you do.
• Zoho Desk — the help widget and support tickets, if you use them.

All of these operate outside Ghana, which means your data is stored and processed in other countries. Your workspace itself — the database, the sign-in records and your uploaded files — is held in the United States. The payment, email, support and monitoring services above each hold their own slice of it in the countries they operate from.

Your workspace and its contents stay while your account is open. If you close your account we delete or anonymise your data within 90 days, except where we have to keep records longer — payment records for accounting and tax being the usual reason.

Backups are kept on a rolling basis and are overwritten in the ordinary course, so deleted data can persist in a backup for a short period after it disappears from the product.

You can ask us for a copy of the data we hold about you, to correct it, to delete it, or to stop a particular use of it. Write to hello@packaged.services and we will respond within 30 days.

If a request concerns one of your clients, they should approach you rather than us — it is your workspace and your relationship. We will help you action it.

Data is encrypted in transit and at rest. Access to your workspace is restricted at the database itself, so one business cannot read another's data. Sensitive values such as payment keys are encrypted before they are stored. Two-factor authentication is available on every plan, including the free one.

No system is perfect. If we ever discover a breach affecting your data, we will tell you what happened and what we are doing about it.

What changed on 29 August 2026: we moved the database, the sign-in system and file storage off Supabase and onto our own infrastructure at Amazon Web Services. Data that was previously held in Ireland is now held in the United States. Nothing about what we collect, what we use it for, or who else sees it changed — only where it sits and who operates the machines it sits on.

If we change this policy in a way that matters, we will say so rather than quietly updating the date. Questions go to hello@packaged.services, or through our contact page.