Zulaiy Technologies LLC (a limited liability company organized under the laws of the State of Delaware, United States) — "Zulaiy", "we", "us" — is the controller of the personal data described in this policy. This policy covers zulaiy.com, our sales and booking process, our client engagements, and our software subscriptions, digital products and mobile apps. It does not cover third-party sites we link to.
Products on their own domains. Our subscription products, digital products and mobile apps are still in development and none is on sale yet, so the sections below describing product and app data apply from the point each one launches. Each will run on its own domain and publish its own privacy policy covering the data that product handles; where one exists, that policy governs that product and this one applies as the policy of the company behind it. Whichever you use, the controller is the entity named above and the rights in section 8 apply. Our Products page shows the current status of each line.
1. Data we collect
Data you give us
- Enquiries and contact forms — name, email address, subject and the content of your message.
- Discovery call bookings — name, email address, chosen time zone and slot, and anything you write in the booking notes. Handled through Cal.com.
- Newsletter sign-ups — email address.
- Job applications — the contact details, CV and application content you send us.
- Client and billing records — business contact details for your team, entity details, billing address, tax identifiers, invoices and payment confirmations.
- Engagement correspondence — emails, call notes, requirements and documents exchanged during a project.
Data from our products and apps
If you sign up for a subscription product, buy a digital product, or install one of our apps:
- Account data — name, email address, password (stored only as a salted hash), organisation, role and the settings you choose.
- Subscription and billing data — the plan you chose, trial and renewal dates, billing address, tax identifiers, invoices and payment confirmations. Card details go to Stripe, not to us.
- Content you put into the product — the files, records and data you upload or create. We treat this as yours; see section 3.
- Usage and diagnostic data — features used, actions taken, timestamps, error and crash reports, and performance telemetry, used to operate, secure and improve the product.
- Device data (apps) — device model, operating system version, app version, language, and a device or installation identifier.
- Push notification tokens, where you enable notifications. Disable them in your device settings at any time.
- Permissions you grant — such as camera, photos or location, only where a feature needs them, only while you allow it, and revocable in your device settings.
- Support conversations — the messages, screenshots and diagnostics you send us.
Where you buy through the Apple App Store or Google Play, those stores process the transaction and share only limited confirmation data with us. They do not give us your payment details. Their own privacy policies govern what they collect.
Data collected automatically
- Analytics — pages viewed, referring page, approximate location derived from IP, device and browser type, and interaction events. Collected via Google Analytics 4 only where you have consented to analytics cookies.
- Server and security logs — IP address, timestamp and request details, recorded by our hosting and CDN provider to serve the site and defend it against abuse.
Data from others
We may receive your business contact details from a colleague who refers you, from a mutual introduction, or from public professional sources such as a company website or LinkedIn profile, where we have a legitimate interest in contacting you about relevant services.
We do not knowingly collect special category data (health, biometrics, political opinions and similar), and we ask that you do not send it to us in enquiries or applications.
2. Why we use it, and our legal basis
| Purpose | Data used | Legal basis (UK/EU GDPR) |
|---|---|---|
| Respond to your enquiry and schedule calls | Contact and enquiry data | Steps taken at your request prior to entering a contract; legitimate interests |
| Prepare proposals and deliver engagements | Client, engagement and correspondence data | Performance of a contract |
| Create and run your product account, and provide the subscription you bought | Account, subscription and content data | Performance of a contract |
| Bill subscriptions, manage trials and renewals, and send receipts | Subscription and billing data | Performance of a contract; legal obligation |
| Keep products working, secure and free of abuse; fix crashes | Usage, diagnostic and device data | Performance of a contract; legitimate interests |
| Send service and transactional messages (renewal reminders, security notices) | Account and subscription data | Performance of a contract; legal obligation |
| Send push notifications you have enabled | Push token, account data | Consent |
| Provide customer support | Support conversations, account data | Performance of a contract; legitimate interests |
| Invoice, take payment and prevent fraud | Billing and payment data | Performance of a contract; legal obligation; legitimate interests |
| Keep accounting and tax records | Billing and payment data | Legal obligation |
| Send the newsletter and occasional service updates | Email address | Consent (withdrawable at any time) |
| Measure how the website is used and improve it | Analytics data | Consent |
| Keep the site secure and available | Server and security logs | Legitimate interests |
| Assess job applications | Application data | Steps prior to a contract; legitimate interests |
| Establish, exercise or defend legal claims | As relevant | Legitimate interests; legal obligation |
We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not use it to make decisions about you by automated means that produce legal or similarly significant effects.
3. Client data we handle on your behalf
During an engagement we often work inside your systems and with datasets you control. Where those datasets contain personal data, you are the controller and we act as your processor. In that role we process the data only on your documented instructions, restrict access to personnel who need it, keep it confidential under our Terms of Service, use only subprocessors you have approved, assist you with data subject requests and security incidents, and delete or return the data at the end of the engagement. We will sign a data processing agreement on request. If you are an individual whose data was given to us by one of our clients, please contact that client first — we will forward any request we receive directly to them.
4. Who we share data with
We share personal data only with service providers who process it on our behalf under contract, and with professional advisers or authorities where the law requires it. Our current providers:
| Provider | Purpose | Data |
|---|---|---|
| Cloudflare, Inc. | Website hosting, CDN and security | Server logs, IP address |
| Google LLC (Analytics 4) | Website analytics, with consent | Usage and device data, online identifiers |
| Cal.com, Inc. | Discovery call scheduling | Name, email, booking details |
| Stripe, Inc. | Payment processing, invoicing and subscription billing | Billing contact and payment data |
| Apple Inc. / Google LLC | App distribution and in-app purchase billing | Purchase confirmations, app store account identifiers |
| Product hosting, error-monitoring and support providers | Running our subscription products, diagnosing crashes, answering support requests | Account, usage, diagnostic and support data |
| Email and productivity providers | Correspondence, documents and project records | Contact and engagement data |
| Cloud infrastructure providers | Hosting of systems we build, where the engagement calls for it | As defined in the engagement |
If we are ever involved in a merger, acquisition or sale of assets, personal data may transfer to the acquirer, subject to the protections in this policy. We will notify affected clients.
5. International transfers
We operate from the United States and Nigeria and work with clients worldwide, so your data may be transferred to and processed in countries other than your own, including the United States. Where we transfer personal data out of the UK or EEA, we rely on an adequacy decision where one applies, or on the European Commission's Standard Contractual Clauses (and the UK Addendum) with appropriate supplementary measures. A copy of the relevant safeguards is available on request.
6. How long we keep it
- Enquiries that do not become engagements — 24 months from last contact.
- Client and engagement records — for the engagement plus 6 years, to cover contractual and limitation periods.
- Product accounts and the content in them — for as long as the subscription is active, then 30 days after termination so you can export, then deleted from live systems with backups expiring on their normal cycle. Ask and we will delete sooner.
- Usage and diagnostic data — up to 12 months.
- Invoices and accounting records — 7 years, as required by tax law.
- Newsletter subscribers — until you unsubscribe, plus a suppression record so we do not re-add you.
- Job applications — 12 months after the decision, unless you ask us to keep them longer.
- Analytics data — up to 14 months in Google Analytics.
- Server and security logs — typically 30 days.
7. How we protect it
We use encryption in transit (HTTPS/TLS) across the site and our tooling, role-based access on a need-to-know basis, multi-factor authentication on business-critical accounts, encrypted storage on company devices, vetted providers, and contractual confidentiality obligations on everyone who works with us. No method of transmission or storage is completely secure, but if a breach affects your personal data and is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority as the law requires.
8. Your rights
Depending on where you live, you may have the right to: access the personal data we hold about you; correct it; delete it; restrict or object to our processing (including profiling and direct marketing); receive it in a portable format; withdraw consent at any time without affecting processing already carried out; and not be discriminated against for exercising any of these rights.
If you are in California or another US state with comprehensive privacy legislation, you additionally have the right to know the categories of personal information collected, disclosed and (if applicable) sold or shared, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, and we do not offer financial incentives for personal information. You may use an authorised agent to make a request.
To exercise any right, email info@zulaiy.com. We will acknowledge within 5 business days and respond within 30 days (or 45 days in the US, where the law allows, with notice). We may need to verify your identity before acting. You can unsubscribe from the newsletter at any time using the link in any email.
If you are unhappy with our response you may complain to your local supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); in the EEA, your national data protection authority; in Nigeria, the Nigeria Data Protection Commission. We would appreciate the chance to resolve it with you first.
9. Cookies
We use a small number of cookies and similar technologies. Analytics cookies are set only after you consent, and you can change your choice at any time. See our Cookie Policy for the full list and controls. We honour Global Privacy Control (GPC) signals as a valid opt-out where the law recognises them.
10. Children
Our website, products and apps are for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16, our apps are not rated or marketed for children, and we do not use data from them for advertising. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Changes to this policy
We may update this policy. The "Last updated" date at the top of this page always reflects the current version. Where changes are material we will post a notice on this page, and notify clients and subscribers by email, before they take effect.
12. Contact us
For any privacy question or request:
Zulaiy Technologies LLC
10, Zulaiy Hub, Ilorin, Kwara State, Nigeria
Email: info@zulaiy.com
Phone: +234 814 616 4824