Privacy Policy

1. Introduction

Kostomer ("we", "us", or "our") is committed to protecting the privacy of our users and their customers. This Privacy Policy explains how we collect, use, store and protect information when you use the Kostomer platform at kostomer.com.

By accessing or using Kostomer, you agree to the terms of this Privacy Policy. We comply with the Nigeria Data Protection Regulation (NDPR) and applicable data protection laws.

2. Information We Collect

Account & Organisation Data

• Your name, email address and phone number when you register
• Your company name, address and contact details
• Billing and subscription information (processed via Paystack)
• Login credentials (passwords are never stored in plain text)

Business Data You Enter

• Leads, customers and their contact details
• Installation records, maintenance schedules and payment histories
• Team member profiles and access roles
• Any notes, files or data you upload to the platform

Usage Data

• Pages visited, features used and actions taken within the platform
• Device type, browser, IP address and general location
• Error logs and performance data to help us improve the product

3. How We Use Your Information

• To provide, maintain and improve the Kostomer platform
• To process payments and manage your subscription
• To send transactional emails (account activation, payment receipts, reminders)
• To send SMS and email reminders on your behalf to your customers (only when you trigger them)
• To respond to your support requests
• To detect and prevent fraud, abuse or security incidents
• To comply with legal obligations

We do not sell, rent or share your personal data or your customers' data with third parties for marketing purposes.

4. Third-Party Services

To operate Kostomer, we work with carefully selected third-party service providers. These providers only receive the minimum data necessary to perform their specific function:

• Database & authentication provider — securely stores your account and business data
• Payment processor — handles subscription billing; we never store your card details
• Email delivery provider — sends transactional emails and reminders on your behalf
• SMS delivery provider — sends SMS reminders to your customers when you trigger them
• Cloud hosting provider — hosts and serves the Kostomer platform

All third-party providers are bound by data processing agreements and are required to handle your data in accordance with applicable data protection laws. We do not sell or share your data with any provider beyond what is necessary to deliver the service.

5. Data Storage & Security

Your data is stored securely on Supabase infrastructure. We apply industry-standard security measures including encryption in transit (HTTPS/TLS), encrypted storage, and row-level security to ensure each organisation can only access their own data.

While we take reasonable steps to protect your data, no system is completely secure. We encourage you to use a strong password and keep your login credentials confidential.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription and do not renew within 90 days, we may permanently delete your account and all associated data. You may request deletion of your data at any time by contacting us.

7. Your Rights (NDPR)

Under the Nigeria Data Protection Regulation, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to or restrict how we process your data
• Port your data to another service

To exercise any of these rights, contact us at privacy@kostomer.com.

8. Cookies

Kostomer uses only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page and, where the changes are significant, notify you by email.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: