Privacy policy

This policy explains what personal data we collect when you use the StackBridge website and service, why we collect it, how long we keep it, and the rights you have under the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation 2019 (NDPR).

1. Who we are

StackBridge is operated by Supreme Stack Systems Limited, a company registered in Nigeria with its head office in Kaduna. For questions about this policy or your data, contact our Data Protection Officer at [email protected].

2. Two roles: controller and processor

For your business data (your customers, suppliers, staff, transactions) that you enter into your StackBridge workspace, you are the data controller and we are your data processor. We process that data only on your instructions, as described in our terms of service.

For your account and this website (your sign-up details, billing records, support conversations, website analytics), we are the data controller.

3. What we collect and why

• Account data: name, work e-mail, phone number, company name, industry, chosen subdomain. Used to create and secure your account, bill you, and contact you about the service. Legal basis: contract.
• Billing data: plan, invoices, payment references. Card details are collected and stored by our payment processor (Paystack), not by us. Legal basis: contract and legal obligation (tax records).
• Support data: messages you send us by e-mail, WhatsApp, phone or the contact form, and, with your permission, temporary access to your workspace to resolve an issue. Legal basis: contract and legitimate interest.
• Usage and technical data: IP address, browser, device type, pages visited, error logs. Used for security, fraud prevention and to improve the service. Legal basis: legitimate interest.
• Marketing preferences: whether you have agreed to receive product news. Legal basis: consent, which you can withdraw at any time.

4. Cookies

We use essential cookies to keep you signed in and to protect forms, and, only if you accept them, analytics cookies to understand how the website is used. See the cookie policy.

5. Who we share data with

We do not sell personal data. We share it only with service providers who help us run StackBridge, under contracts that restrict their use of it: payment processing (Paystack), transactional e-mail and SMS/WhatsApp delivery, cloud infrastructure and backup storage, and professional advisers where required by law. We may disclose data where a Nigerian court, regulator or law requires it.

6. Where data is kept and how it is protected

Each customer's workspace runs in its own isolated database. Data is encrypted in transit, backed up daily with encryption at rest, and protected by role-based access controls. Our staff access a customer workspace only with permission and for the time needed, and such access is logged. Where any processing takes place outside Nigeria, we ensure protections consistent with the NDPA. See security & trust.

7. How long we keep data

• Your workspace data: for as long as your subscription is active, then 30 days after cancellation, during which you can export it, after which it is permanently deleted (a final pre-deletion backup is retained for a short period for disaster recovery, then destroyed).
• Billing and tax records: for the period Nigerian tax law requires, currently six years.
• Support conversations: up to 24 months.
• Website analytics: aggregated and anonymised; raw logs no longer than 12 months.

8. Your rights

Under the NDPA you may ask us to: confirm whether we hold your personal data; give you a copy of it; correct it; delete it; restrict or object to processing; move it to another provider; and withdraw consent where processing is based on consent. Write to the Data Protection Officer; we respond within the period the law allows, and we do not charge for a first request. If you are unhappy with our response you may complain to the Nigeria Data Protection Commission.

9. Children

StackBridge is a business service and is not directed at children under 18. We do not knowingly collect their data.

10. Changes

When we change this policy in a material way we will tell account holders by e-mail and update the date above. Continued use after the change means you accept the updated policy.

11. Contact

Data Protection Officer: [email protected] · General enquiries: [email protected] · Supreme Stack Systems Limited, Abuja, Nigeria.