Privacy

§ 01

Who we are

KleeLab is run by REGISTERED COMPANY NAME, registered in Nigeria with the Corporate Affairs Commission under number RC NUMBER, at REGISTERED ADDRESS. We decide how your personal data is used, which makes us the data controller under the Nigeria Data Protection Act 2023.

For anything about your data, email hello@kleelab.com — confirm this inbox is live.

§ 02

What we collect

We collect as little as we can while still running the service.

• Account details: your email address, and a name if you give us one. Passwords are stored only as a hash, never in a readable form.
• Project records: the updates, messages, approvals, requests and files on your client dashboard.
• Invoices and payments: what we billed you and whether it was paid. Card details go straight to our payment provider; we never see or store them.
• Enquiries: anything you send through the contact form, along with your email address.
• Chat messages: what you type into the assistant on our site. They are used to answer you and are not saved once the conversation ends, unless you choose to send them to the team as an enquiry.
• Visit counts: which public pages are viewed, using a random visitor ID stored in your browser (see the cookies page).
• Technical basics: IP address and browser details, recorded in server logs for security and to limit abuse.

§ 03

Why we hold it

To deliver the service you asked for: running your client dashboard, delivering your project, billing for it, and answering when you get in touch. This is necessary for our contract with you, or for steps you asked us to take before one.

To meet legal duties, such as keeping invoice and payment records for tax purposes.

Because we have a legitimate interest in keeping the service working and secure, which is why we keep short-lived server logs, collect error reports and limit repeated sign-in and contact attempts.

DECISION ON ANALYTICS: if visit counting moves behind a consent prompt, add: “To count page visits, with your consent, which you can withdraw at any time.”

§ 04

Who else sees it

We use a small number of service providers to run KleeLab. They handle data only on our instructions and only for the job listed:

• Resend and Mailtrap: deliver account and project emails, such as invitations and update notices.
• Paystack: takes card payments for invoices. Paystack handles your card details directly under its own privacy policy.
• Cloudinary: stores files and images shared on your project dashboard.
• DeepSeek and Google (Gemini): generate replies in the site chat when it is switched on. Only the conversation is sent, never your account details. Please do not put private or sensitive information in the chat.
• Thravic: counts visits to our public pages.
• Sentry: collects error reports so we can fix problems. Reports describe what went wrong and may include technical details of the request.
• Slack: tells our team about new enquiries and project activity. These notices can include your email address and the subject of your message.
• HOSTING PROVIDERS, e.g. Render, Vercel, Neon — list the ones actually used: run the application and the database.

§ 05

Data stored outside Nigeria

Several of these providers store or process data outside Nigeria, including in the United States, the European Union and, for the DeepSeek chat, China. Where we send personal data abroad, we rely on the safeguards the Nigeria Data Protection Act allows, such as the provider’s contractual commitments on protecting data.

CONFIRM WITH YOUR LAWYER which transfer basis applies to each provider

§ 06

How long we keep it

Account and project data are kept while your account exists, so you can always look back at decisions and approvals.

If you delete your account, we delete your account and project records, except invoices and payment records. The law requires us to keep those for six years — confirm with your accountant, after which we delete them.

Enquiries that do not become a project are deleted after two years.

Server logs and error reports are kept for 30 days — confirm your providers’ settings and then deleted.

§ 07

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. We can send you a machine-readable copy of everything we hold about you. Where we rely on your consent, you can withdraw it at any time.

To make a request, email hello@kleelab.com — confirm this inbox is live. We reply within 30 days.

If you are not happy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

§ 08

Children

KleeLab is a service for organisations and businesses. It is not meant for children, and we do not knowingly collect data from anyone under 18.

§ 09

Cookies and browser storage

We do not use advertising cookies. We store sign-in details in your browser so you stay logged in, and our analytics stores a random visitor ID. The cookies page lists every item and what it is for.

§ 10

Changes to this policy

If we make a meaningful change, we update the date at the top of this page and tell clients by email before it takes effect.