Privacy Policy

1. Data Controller

The entity responsible for your data is:

2. Information We Collect

We collect data to provide the service and strictly enforce our infrastructure security.

A. Information You Provide

• Account Data: Username, email address, and encrypted password.
• Billing Information: When you purchase a subscription via Paystack, we collect the Transaction Reference and payment status. We do not store your credit card details; they are processed entirely by Paystack.
• User Content (Code): The HTML, CSS, and JS code you upload/paste into the builder.

B. Information Automatically Collected

• Edge Server Logs: Our Rust Edge Server automatically logs your IP address, User-Agent, and Request Headers for security purposes (DDoS protection and abuse detection).
• Device Information: Browser type, operating system, and screen resolution (to optimize the Dashboard UI).

3. How We Use Your Information

We use your data for the following specific purposes:

• Service Delivery: To deploy your static sites to our Edge Nodes and route traffic via Caddy.
• Billing & Activation: To manually or automatically verify payments and unlock "Pro" or "Enterprise" features.
• Infrastructure Security: To detect abnormal traffic patterns (e.g., botnets) attacking our DigitalOcean droplets.
• Service Improvement (AI Analysis): As part of our roadmap, we may process your uploaded code using internal AI tools to generate performance reports or accessibility suggestions for your benefit. We do not sell your code to third parties. Such processing is limited to providing features directly to you and does not involve training general-purpose or third-party AI models without your explicit consent.

4. Third-Party Data Processors

To provide a global PaaS from Nigeria, we share data with specific infrastructure partners. By using BlinkHost, you authorize these sub-processors:

5. International Data Transfers

Data transfers are necessary to provide the Service and are safeguarded using appropriate technical and contractual measures.

Consent: By creating an account, you explicitly consent to the transfer of your personal data to jurisdictions outside of Nigeria (specifically the UK, EU, and US) which may have different data protection laws.

Safeguards: We rely on standard contractual clauses and the security measures of our major providers to protect your data during transit.

6. Data Retention & The "Purge" Policy

We do not store data forever.

• Active Accounts: We retain data as long as your account is active.
• Backup Retention: Database backups are retained for up to 30 days in encrypted storage before being overwritten.
• Dormant/Free Accounts: If you are on a Free plan and do not log in for 12 consecutive months, we reserve the right to permanently delete your account and all associated "Sticky Data" to free up server resources.

7. Cookies and Tracking

We maintain a "Minimalist Cookie Policy."

• Essential Cookies: We use session tokens (JWTs) stored in your browser to keep you logged in. You cannot use the dashboard without these.
• No Third-Party Ads: We do not sell your browsing data to ad networks.

8. Your Rights (NDPR & GDPR)

Depending on your location, you have rights regarding your data:

• Right to Access: You can view your profile data in the Dashboard.
• Right to Deletion: You may request the deletion of your account. Note that this will immediately take your sites offline. Some billing records must be kept for tax purposes (FIRS compliance).
• Right to Portability: You can copy/paste your code out of our editor at any time.

9. Security of Your Data

We employ "Defense in Depth" strategies:

• Transit: All data is encrypted via SSL/TLS (HTTPS).
• At Rest: Passwords are salted and hashed. Backups are stored in secure buckets.
• Isolation: User sites are sandboxed; our Edge Server logic prevents cross-site data leakage.

10. Contact Us

For privacy concerns or to exercise your rights, contact our Data Protection Officer at: