Privacy Policy
Last updated: [DATE]
1. Who we are
CyberPulse is operated by [COMPANY LEGAL NAME], [REGISTRATION NUMBER], [ADDRESS] ("we", "us"). We are the controller of the personal data described below. Contact: [PRIVACY EMAIL].
2. What we collect
- Business details you enter: business name, business email, industry, number of employees.
- Your assessment answers: your Yes / Partially / No / Not sure responses about security practices.
- Country and payment status: the country you select, the price shown, the payment provider's transaction reference, amount, currency and whether it succeeded.
- Technical data: IP address and basic request logs held by our hosting provider for security and troubleshooting.
We do not collect passwords, banking or card details, government ID numbers or other sensitive personal information. We do not scan your systems or domains. Card and mobile-money details are entered only on our payment partners' secure pages.
3. Why we use it
- To calculate your score and produce your report, and to email it to you (performance of our contract with you).
- To take payment, prevent fraud and keep records (contract, legal obligation and legitimate interests).
- To secure and improve the service (legitimate interests).
- [If you add marketing emails: only with your consent, which you can withdraw at any time.]
4. Who we share it with
We use service providers who process data on our behalf: Supabase (database), Vercel (hosting), Paystack (payments), and Resend (email delivery). We do not sell your data. We may disclose data if required by law. [LAWYER: list provider locations and confirm transfer safeguards.]
5. International transfers
Our providers may process data outside your country. Where required, we rely on appropriate safeguards under applicable law. [LAWYER: complete for the Nigeria Data Protection Act (NDPA) and any other law that applies to you.]
6. How long we keep it
We keep assessment and payment records for [RETENTION PERIOD, e.g. 24 months], then delete or anonymise them, unless the law requires longer (for example tax records).
7. Your rights
Depending on where you live, you may have the right to access, correct or delete your data, object to or restrict certain processing, withdraw consent, and complain to your data-protection authority. To exercise these rights email [PRIVACY EMAIL]. We will respond within the time required by applicable law.
8. Security
We use encryption in transit, restricted access to our database, hashed access tokens and server-side payment verification. No online service is perfectly secure, so we cannot guarantee absolute security.
9. Children
CyberPulse is for businesses and is not directed at children under 18.
10. Changes
We may update this policy and will change the date above when we do.