Privacy Policy

2. Data we collect

• Account data. Your name, email address, business name, workspace settings and password (stored only as a secure hash).
• Billing data. Your plan, invoices for your subscription and records of payments you make to us. Subscription payments are handled by third-party payment processors; we never store your full card details.
• Client and invoice data. Your clients' names, email addresses and the invoices, payments, credit balances and messages associated with them. This data is provided by you, or by your clients through secure invoice links, and belongs to your business.
• Usage data. Log data, device and browser type, pages viewed and similar technical information needed to operate and secure the Service.
• Communications. Messages you send us through support or feedback channels.

3. How we use data

• To provide, operate and maintain the Service, including invoicing, payment tracking and client credit.
• To authenticate you and secure your workspace.
• To send transactional emails such as invoice delivery, payment confirmations and one-time verification codes.
• To send product updates and news you can opt out of at any time using the unsubscribe link in every email.
• To provide support and respond to your requests.
• To detect fraud, prevent abuse and keep the Service secure.
• To improve the Service and comply with our legal obligations.

4. Legal bases

We process personal data on the following bases: performance of our contract with you (providing the Service); legitimate interests (securing and improving the Service); consent (optional marketing emails, which you can withdraw at any time); and compliance with legal obligations such as tax and record-keeping requirements.

5. Sharing and processors

We never sell personal data and we do not use it for third-party advertising. We share data only with:

• Cloud hosting and infrastructure providers that run the Service.
• Email delivery providers that send transactional and product emails on our behalf.
• Payment processors that handle subscription payments.
• Professional advisers (such as auditors and lawyers) under confidentiality.
• Authorities where required by law, or in connection with a merger or acquisition, with notice to you where practicable.

6. Your clients' data

You are responsible for having a lawful basis for the client data you upload to Tideoo. When your clients open a secure invoice link, we process their data on your behalf: verifying their email with a one-time code, displaying the invoice and recording payments you confirm. We do not use your clients' data for our own marketing.

7. Retention

We keep personal data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 90 days, except where we must retain it longer for legal or tax reasons. Backups are purged on a rolling cycle.

8. Security

We protect data with encryption in transit and at rest, hashed passwords, least-privilege access controls and continuous monitoring. No method of transmission or storage is perfectly secure, but if a breach affects your personal data we will notify you and the relevant regulator as required by law.

9. Your rights

Subject to applicable law, you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. To exercise any of these rights, use your account settings or email privacy@tideoo.com. We respond within the timeframes set by the NDPA (30 days) or other applicable law. If you are in Nigeria, you may also complain to the Nigeria Data Protection Commission; if you are in the EU or UK, to your local supervisory authority.

10. International transfers

Our service providers may process data in countries other than Nigeria. Where that happens, we rely on appropriate safeguards, such as standard contractual clauses, to protect your data.

11. Cookies

We use only essential cookies and browser storage to keep you signed in, remember your preferences and protect the Service. We do not use third-party advertising or tracking cookies.

12. Children

The Service is not directed to anyone under 18. If we learn that we hold personal data from a child under 18, we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "last updated" date, and notify you of material changes by email or in-app notice.

14. Contact

Questions about privacy? Email privacy@tideoo.com.