Privacy Policy

1. Introduction

Censiq ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our invoicing and billing hub service at censiq.com ("Service").

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and authentication details when you create an account via Supabase or Google.
• Business Information: Your business name, address, and payout details required to generate invoices.
• Client Information: Names, email addresses, phone numbers, and Telegram IDs of your clients that you input into the Service to route invoices.
• Invoice Data: Invoice content, milestone amounts, dates, and project notes.
• Payment Information: Payment transactions are securely processed by Paystack. We do not store your full credit card details on our servers.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, and actions taken within the Service.
• Device Information: Browser type, operating system, and device type.
• Log Data and IP Address: We collect your IP address specifically to dynamically calculate regional pricing matrices and display the correct currency for your location.
• Cookies: Session cookies required to securely maintain your authenticated state.

3. How We Use Your Information

We use your information strictly to:

• Provide and maintain the Service, including creating and securely storing your invoices and milestone escrow data
• Process your Premium subscription payments through Paystack
• Send invoices and payment reminders by email or SMS and generate manual WhatsApp sharing links
• Calculate accurate regional subscription pricing based on your geolocation
• Communicate with you regarding account security, product updates, or technical support
• Detect and prevent fraud, unauthorized access, or policy abuse
• Comply with financial and legal obligations

4. Communications to Your Clients

When you use our automated messaging features, we route messages on your behalf through official API integrations. These messages contain:

• A secure link to view and pay the invoice
• Any customized project notes you included
• Your business identity details

We act purely as a delivery conduit. We absolutely do not use your clients contact information for any purpose other than delivering the specific invoices you request. We will never add your clients to our mailing lists, sell their data, or send them promotional communications regarding Censiq.

5. Data Storage and Security

We implement robust technical measures to protect your data using industry standard protocols:

• Row Level Security: Our Supabase database architecture ensures that you can only read and write data explicitly linked to your authenticated user identity.
• Encryption: Data is encrypted in transit using secure TLS protocols and encrypted at rest on our secure database servers.
• Authentication: Secure session management handled by Supabase Auth and Google Services.

While we utilize strict security architecture to protect your business data, no method of digital transmission or server storage is entirely flawless. You use the Service with this understanding.

6. Data Sharing

We never sell your personal data. We only share information with essential third party infrastructure providers required to operate Censiq:

• Infrastructure Providers: Supabase for database hosting and secure authentication.
• Payment Processors: Paystack for securely processing your subscription and generating client checkout sessions.
• Communication APIs: Meta and Telegram exclusively for routing your requested invoice links to your clients.
• Legal Requirements: When mandated by law enforcement or government agencies to comply with legal obligations.

7. Data Retention

We retain your data for as long as your account remains active so you can access your invoice history. If you request account deletion, we will permanently erase or irreversibly anonymize your personal data within 30 days, except for transaction records we are legally required to retain for accounting and compliance purposes.

8. Your Data Protection Rights

In compliance with global data privacy frameworks including the Nigerian Data Protection Regulation and GDPR, you possess the following rights regarding your personal data:

• Access: You may request a comprehensive copy of the personal data we hold about you.
• Rectification: You may correct inaccurate or incomplete business information through your dashboard.
• Erasure: You may request complete deletion of your account and associated data.
• Portability: You may export your invoice history into standard readable formats.

To exercise any of these rights, please contact our support team. We will process your request securely within 30 days.

9. Cookies and Analytics

9.1 Essential Cookies

We rely on strictly necessary cookies and local storage tokens to keep your session authenticated, secure your account against cross site request forgery, and remember your regional pricing tier. The Service cannot function safely without these essential tokens.

9.2 Google Services Analytics

We may utilize Google Services to analyze aggregated website traffic, understand feature adoption, and detect technical errors. These analytics tools collect anonymized data regarding device types, broad geographic regions, and interface interactions. You can manage your preferences regarding non essential tracking through your browser settings.

10. Third Party Service Policies

Because Censiq integrates with secure external platforms, we encourage you to review their independent privacy frameworks:

• Supabase: For backend data hosting and authentication
• Paystack: For compliance and payment processing
• Google: For authentication and technical analytics
• Meta: For WhatsApp Business API message routing

11. Age Restrictions

Censiq is a business tool strictly intended for individuals 18 years of age or older who possess the legal capacity to form binding contracts. We do not knowingly collect personal data from minors. If we discover that a minor has provided us with personal data, we will immediately terminate the account and delete the associated information.

12. International Data Transfers

Your data is processed and stored on secure cloud servers which may be located outside your country of residence. By utilizing Censiq, you consent to the secure transfer of your data to our infrastructure providers. We ensure all data transfers utilize strict encryption and comply with applicable international data protection standards.

13. Policy Updates

We may revise this Privacy Policy periodically to reflect infrastructure upgrades or new legal requirements. We will notify active account holders of any significant material changes via email or dashboard alerts. Continued use of Censiq after modifications indicates your acknowledgment of the updated terms.