Privacy Policy

FirmOS Hub is operated by FirmOS Ltd, Lagos, Nigeria ("we", "us"). This policy explains how we collect, use, and protect personal data in line with the Nigeria Data Protection Act, 2023 (NDPA) and the NDPR.

1. Data we collect

• Account data: owner email, firm name, RC number, plan tier.
• Seat data: name and email of members you add.
• Billing data: Paystack customer and subscription references. We do not store card numbers.
• Usage logs: timestamps of provisioning events and webhook deliveries.

2. Purpose of processing

We process personal data to operate the FirmOS Hub subscription, provision app entitlements, bill your firm, respond to support requests, and comply with Nigerian tax and corporate law.

3. Lawful basis

We rely on contract performance (delivering the service you subscribed to), legal obligation (Nigerian tax and reporting), and legitimate interest(fraud prevention, security).

4. Sharing

We share data only with processors that operate the service: our infrastructure and database provider, our payment processor (Paystack), and the FirmOS suite apps you are entitled to. We do not sell personal data.

5. Data storage & transfers

Data is stored on managed cloud infrastructure. Where data is processed outside Nigeria, we rely on the NDPA's cross-border transfer provisions and contractual safeguards with the processor.

6. Retention

We retain account and billing records for at least 6 years after the last invoice, in line with Nigerian tax record-keeping requirements. Other data is deleted within 90 days of account closure.

7. Your rights under NDPA

You have the right to access, rectify, erase, restrict, and port your personal data, and to object to certain processing. Contact us at privacy@firmos.ng to exercise these rights. You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC).

8. Security

Access to your firm's records is restricted by row-level security to your owner account and our authorised staff. Passwords are hashed by our identity provider. Provisioning webhooks to FirmOS apps are signed with per-app secrets.

9. Contact / Data Protection Officer

FirmOS Ltd, Lagos, Nigeria · privacy@firmos.ng