Privacy Policy

1. Who We Are #

This policy explains how Kinwave Technologies Ltd ("we", "us") handles personal data when you use KipBiz. our registration details are available on request

2. Scope of This Policy #

This policy applies to the website, the account and subscription flows, and the authenticated application. It covers personal data about you as a user, and personal data that you choose to store in the Service about your own customers, suppliers, staff and contacts.

We are a controller for your own account data. For personal data that businesses enter about their customers and suppliers, the business is the controller and we act on its instructions as a processor.

3. Information We Collect #

We collect only what we need to operate the Service, and we tell you what we do with it.

• Account information you give us: name, email address, and — for partner applicants only — an optional phone number.
• Passwords, stored in a hashed form. We never store or see your password in plain text.
• Business data you enter: products, sales, purchases, stock movements, customers, suppliers, staff, expenses and reports. This may include personal data about people you transact with.
• Billing and subscription records, including plan, billing period, amounts, payment references and subscription dates. We do not store full payment card details; those are handled by our payment provider.
• Technical information: IP address, browser and device type, pages visited, referring page, and diagnostic logs used to detect errors and abuse.
• Cookie and consent choices, as described in our Cookie Policy.

4. How We Use Your Information #

We use personal data only for the following purposes:

• To create and operate your account, and to provide the features you have paid for.
• To take payment, manage your subscription and issue receipts.
• To verify your email address and to authenticate each sign-in.
• To send service messages about your account, your subscription, your trial and your invoices.
• To send requested service communications. A public newsletter signup and Contact Us submission workflow are not currently available; registration does not subscribe you to a newsletter.
• To keep the Service secure, prevent fraud and abuse, and diagnose faults.
• To understand which parts of the Service are used so we can improve it.
• To comply with legal obligations and respond to lawful requests from authorities.

5. Lawful Basis for Processing #

Where we process personal data we identify the basis we rely on, which is one of the following:

• Performance of a contract: processing needed to run your account, subscription and the features you asked for.
• Legitimate interests: security, fraud prevention, service improvement and business administration, balanced against your rights.
• Consent: optional analytics storage. You can withdraw consent at any time without affecting processing already carried out.
• Legal obligation: record keeping, tax and regulatory requirements, and responding to lawful authority requests.

6. How We Share Your Information #

We do not sell your personal data. We share it only where necessary, and only with:

• Service providers who host, secure, email and support the Service, under contracts that limit them to using the data for us.
• Our payment provider, to take and settle payments. It handles your payment details under its own privacy policy.
• Professional advisers, auditors, insurers and regulators, where we are required to disclose.
• Law enforcement or another authority, where we are legally required to comply.
• A successor to our business, if we are reorganised or sold, subject to these same obligations.

7. Cookies and Similar Technologies #

We use cookies that are strictly necessary to operate the Service, and — subject to your consent — cookies used to measure how the Service is used. Non-essential cookies are switched off until you choose otherwise. See our Cookie Policy for the detail and for how to change your choice.

8. How Long We Keep Your Data #

Account and business data is kept for as long as your account is open, and for a reasonable period afterwards so you can export or recover it. Records we must keep for tax, regulatory or dispute purposes — including subscription and payment records — are kept for the period the law requires, even after an account is closed.

Technical logs are kept for a short operational period and then deleted or anonymised. Deleting an account does not delete data we are legally required to retain.

9. Security #

We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit, access controls, hashing of passwords and audit trails of administrative changes.

No transmission or storage method is completely secure. If a breach affects your personal data we will notify you and the Nigeria Data Protection Commission as required by law.

10. International Transfers #

Some of our service providers process data on servers outside Nigeria. Where your data is transferred, we use appropriate safeguards to protect it and we do not transfer it in a way that your rights are not protected.

11. Your Rights #

Subject to the law, you may:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct data that is inaccurate or incomplete.
• Ask us to delete data we no longer have a reason or a legal duty to keep.
• Object to, or ask us to restrict, processing based on legitimate interests.
• Withdraw consent for optional analytics storage.
• Complain to the Nigeria Data Protection Commission if you believe we have not handled your data properly.

To exercise any of these rights, contact the support contact provided in your account. We will verify your identity before acting on a request and will respond within the period the law allows.

12. Children #

The Service is a business tool and is not directed at children. You must be at least 18 years old to hold an account. We do not knowingly collect personal data from children, and if we learn that we have, we will delete it.

13. Changes to This Policy #

We update this policy when our processing changes. Each update is published as a new version with its own effective date, and where a change is significant we will tell you by email or in the Service before it takes effect.

14. Contact #

Questions or requests about this policy, or about our data handling generally, can be sent to the support contact provided in your account.