Forging high-performance
SaaS & Corporate Infrastructure.

This Privacy Policy describes how EW Concepts Technologies Limited collects, protects, uses, and handles personal data and telemetry gathered through our platform interfaces, applications, and browser-native portals.

• Sovereign Compliance Layer: We operate under the strict jurisdiction of the Republic of Uganda. All data management, collection pathways, and system storage workflows adhere to the Data Protection and Privacy Act (PDPA) of Uganda.
• Data Controller & Processor Status: The company is formally registered as a data controller and processor with the Personal Data Protection Office (PDPO) of Uganda. We execute our operations based on explicit, granular user consent provided during platform interactions.
• Information We Collect: We collect user identifiers, email addresses, platform credentials, system tracebacks, and operational telemetry required to run our applications. We do not collect or process biometric Know Your Customer (eKYC) profiles or national identity cards unless an enterprise user explicitly initializes a financial or administrative onboarding gateway.
• Cross-Border Transfers: To maintain international uptime and high performance, our systems utilize secure cloud infrastructure hosted across global data center zones. In alignment with Section 19 of the PDPA, we execute standard contractual clauses and rigorous transfer impact assessments to legally protect and secure all data moved across geopolitical borders.

These Terms of Service govern your legal access to and use of the software platforms, automated frameworks, and intelligent ledger protocols engineered by EW Concepts Technologies Limited.

• Legal Framework: By creating an account, initializing an application build, or interacting with our automated systems, you enter into a legally binding contract governed exclusively by the laws of the Republic of Uganda, including the Contracts Act 2010.
• Intellectual Property Sovereignty: The company retains absolute ownership, copyright, patents, and global rights over the core source code, platform architectures, and swarm intelligence frameworks driving our utilities, including GoCode, Buuza AI, SaccoKeep, VouchVault ERP, and TicketBITS. Users are granted a restricted, non-exclusive license to operate these platforms under their designated subscription tiers.
• Reverse-Engineering & Cloning Ban: Users, clients, and independent contractors are strictly prohibited from decompiling, reverse-engineering, copying, or building unauthorized clones of our system architectures, database designs, or business logic. Any attempt to circumvent platform parameters or harvest code patterns triggers immediate account termination and legal restitution actions in the High Court of Uganda.
• Tax and Statutory Liabilities: In accordance with the Income Tax (Amendment) Act and Value Added Tax frameworks of Uganda, all software usage fees and platform subscriptions are subject to local statutory levies. Non-resident software provisions are legally classified as royalties subject to a 15% Withholding Tax (WHT), while consumer transactions are subject to an 18% VAT on electronic services. These liabilities will be calculated dynamically at the point of billing.

EW Concepts Technologies Limited deploys bank-grade, zero-trust security parameters across our entire software assembly line, server endpoints, and cloud databases to protect corporate capital and consumer records from compromise.

• Database Isolation & Row-Level Security (RLS): Our multi-tenant SaaS architecture uses a highly secure shared-schema model powered by PostgreSQL database clusters. Data isolation is rigidly enforced directly at the database kernel level using native Row-Level Security policies. This architecture appends database-enforced filtering clauses to every transactional query, guaranteeing that no tenant can ever view, modify, or leak another organization's financial ledgers or sensitive identity metrics.
• Stateless Authentication Middleware: User identities and administrative privileges are validated through stateless JSON Web Token (JWT) infrastructure. All connection gateways and API endpoints are locked behind strict token verification and Role-Based Access Control (RBAC). User passwords are encrypted using advanced cryptographic libraries utilizing the Bcrypt algorithm and persistent salts to eliminate brute-force vulnerabilities.
• Network & Evasion Telemetry: To secure continuous code synchronization and inference telemetry from external interference or packet throttling, our transport layer integrates state-of-the-art, stateless communication protocols. We deploy transport architectures that utilize native Transport Layer Security (TLS) to mimic standard web traffic, silently and securely routing system payloads around regional geo-fences and local firewall anomalies.
• DevSecOps & Supply Chain Immunity: Our automated code deployment pipelines filter all code outputs through static and dynamic security testing gates. We run continuous software scanners to block hardcoded secrets or weak code blocks. Furthermore, we enforce strict allow-lists for all third-party libraries and dependencies, entirely neutralizing the risk of malicious package injections or supply chain code corruption.