1. Who is responsible for your data
CloudXpert Systems & OacSoft Technologies (BN001659), a business in Nigeria, operates odotservices and is the data controller for the personal data described in this policy. Our office is at Plot 693 Obafemi Awolowo Way, Jabi District, Abuja, Nigeria.
Our Data Protection Officer handles privacy questions and requests: support@odotservices.com.ng.
Data you send through us about other people. When you use odotservices to email, text or verify your own customers, you decide why and how their data is used. For that data you are the controller and we are your processor. That is covered on the Data Protection page.
2. The data we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Name, email address, password (stored only as a one-way hash), the plan you are on | You, when you sign up; Google or GitHub if you sign in with them |
| Payment records | Amount, date, plan or units bought, payment reference, wallet balance. Not your full card number, which stays with the payment provider. | You and our payment providers |
| Usage and technical data | Sign-in times, IP address, browser and device type, API requests, delivery logs, error logs | Collected automatically when you use the service |
| Messages to us | Contact form and support messages, testimonials you choose to give | You |
| Affiliate details | Referral activity, payout bank details, profile you choose to show | You, if you join the affiliate program |
| Email engagement | Whether a marketing email from us was opened or a link in it clicked | Collected automatically from emails we send you |
We do not ask for sensitive personal data about you (such as health, religion or biometric data) to open an account.
3. Why we use it and our legal basis
| Purpose | Legal basis (NDPA section 25) |
|---|---|
| Create and run your account, deliver the services you ask for, take payment, give support | Performing our contract with you |
| Keep the platform secure, prevent fraud, spam and abuse, fix faults, understand how features are used so we can improve them | Our legitimate interests, balanced against your rights |
| Send service messages: receipts, expiry reminders, security and policy notices | Performing our contract; legal obligation |
| Send product news, tips and offers | Our legitimate interest in keeping customers informed, or your consent where the law requires it. You can unsubscribe at any time. |
| Publish a testimonial you wrote | Your consent |
| Keep financial and tax records, answer lawful requests from authorities | Legal obligation |
We may use automated tools, including AI, to summarise how an account uses the platform so our team can offer relevant help. A person reviews the result. We do not make decisions with legal or similarly significant effects about you by automated means alone.
4. Marketing emails
Every marketing email from us has an unsubscribe link, and unsubscribing takes effect at once. You will still receive messages you need for your account, such as receipts and security notices.
6. Transfers outside Nigeria
Some of our providers operate outside Nigeria. Where personal data is transferred abroad we rely on a ground allowed by Part VIII of the Nigeria Data Protection Act, such as an adequate level of protection in the receiving country, contractual safeguards with the provider, or the transfer being necessary to perform our contract with you.
7. How long we keep it
- Account data: while your account is open. When it is closed we delete or anonymise it, except the items below.
- Payment and accounting records: at least six years, as tax and company law require.
- Logs and security records: for as long as needed to operate, secure and troubleshoot the service, then deleted or anonymised.
- Support messages: for as long as needed to handle your request and keep a record of it.
- Marketing preferences: if you unsubscribe we keep your email address on a do-not-email list so we can honour your choice.
8. How we protect it
We use encrypted connections (HTTPS), store passwords only as one-way hashes, encrypt API keys and other secrets, restrict staff access to those who need it, and keep activity logs. No system is perfectly secure, so please use a strong, unique password and keep your API keys private.
If a personal data breach is likely to put your rights at risk, we will tell the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and tell you without undue delay where the risk to you is high.
9. Your rights
Under the Nigeria Data Protection Act you have the right to:
- know whether we hold data about you and get a copy of it;
- have inaccurate or incomplete data corrected;
- have data erased when we no longer have a lawful reason to keep it;
- restrict or object to how we use it, including objecting to direct marketing at any time;
- receive your data in a commonly used electronic format (portability);
- withdraw consent where we rely on it, without affecting what was done before;
- not be subject to a decision based solely on automated processing that has legal or similarly significant effects.
To use any of these rights, email support@odotservices.com.ng. We may need to confirm your identity. We answer within 30 days and do not charge for reasonable requests.
If you are not satisfied with our answer, you can complain to the Nigeria Data Protection Commission: ndpc.gov.ng.
11. Children
odotservices is a business service for adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, tell us and we will delete it.
12. Changes to this policy
We will post any change here with a new date. If a change is significant we will also tell account holders by email or in the dashboard.
13. Contact
CloudXpert Systems & OacSoft Technologies
Plot 693 Obafemi Awolowo Way, Jabi District, Abuja, Nigeria
Data Protection Officer: support@odotservices.com.ng
General support: customersupport@odotservices.com.ng
