Nigeria Building Cost Estimator ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. By using the Service you agree to this Policy.
1. Information We Collect
1.1 Information you provide directly
- Account registration: name and email address.
- Contact form: name (optional), email address, subject, and message content.
- Business profile (Pro users): company name, address, phone number, email, and logo image.
- Estimate inputs: project name, building type, location, dimensions, floor count, materials preference, and any custom line items you add.
1.2 Information collected automatically
- Log data: IP address, browser type, pages visited, referring URL, and timestamps.
- Session data: temporary session identifiers stored in cookies to keep you logged in.
- Usage data: which features are used, estimate generation counts, and error reports — used to improve the Service.
1.3 Payment information
We do not store your card details. Payments for Pro subscriptions are processed by Paystack, which is subject to its own privacy policy. We receive only a transaction reference and subscription status from Paystack.
2. How We Use Your Information
- To create and manage your account.
- To generate, save, and retrieve your building cost estimates.
- To produce PDF estimates and Bills of Quantities that include your inputs and (for Pro users) your business profile.
- To respond to contact form enquiries and support requests.
- To process subscription payments and manage billing.
- To send transactional emails (e.g., password reset, subscription confirmation). We do not send marketing emails without your explicit consent.
- To monitor and improve the performance and reliability of the Service.
- To detect and prevent fraudulent or abusive activity.
- To comply with legal obligations.
3. Legal Basis for Processing
We process your personal data under the following bases:
- Contract performance: processing necessary to provide the Service you signed up for.
- Legitimate interests: security monitoring, fraud prevention, and Service improvement.
- Legal obligation: compliance with applicable Nigerian law.
- Consent: where explicitly obtained (e.g., optional marketing communications).
4. Cookies
We use strictly necessary cookies to maintain your session (login state) and a CSRF token to protect forms from cross-site request forgery attacks — these cannot be disabled and do not require consent, as the Service cannot function without them.
We also use Google Analytics to understand how visitors use the Service (pages viewed, general location, device type) so we can improve it. Analytics cookies are set by default from your first visit; if you'd prefer not to be tracked, click "Decline" on the cookie banner shown on your first visit, and analytics tracking will be turned off for you going forward. You can change your choice at any time by clearing your cookies in your browser settings, which will show the banner again on your next visit; your choice does not affect your ability to log in or use any tool on the Service.
5. Sharing of Information
We do not sell your personal data. We share data only in the following limited circumstances:
- Service providers: hosting, email delivery, and payment processing partners who process data on our behalf under confidentiality agreements.
- Legal requirements: where disclosure is required by Nigerian law, court order, or to protect our legal rights.
- Business transfers: in the event of a merger or acquisition, your data may be transferred to the successor entity, who will be bound by this Policy.
6. Data Retention
- Account data: retained for the lifetime of your account. Deleted within 30 days of account deletion.
- Saved estimates: retained until you delete them or your account is closed.
- Contact form messages: retained for up to 12 months to support follow-up queries.
- Server logs: retained for up to 90 days for security and debugging purposes.
7. Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your account and associated data.
- Restrict or object to certain processing activities.
- Data portability: receive your saved estimates in a machine-readable format on request.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us. We will respond within 30 days.
8. Security
We implement industry-standard security measures including HTTPS encryption, hashed password storage, CSRF protection, and rate limiting. However, no system is completely secure. You use the Service at your own risk and should use a strong, unique password for your account.
9. Children's Privacy
The Service is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified by updating the "Last updated" date and, where appropriate, by email to registered users. Continued use of the Service after changes take effect constitutes your acceptance of the revised Policy.
11. Contact
For privacy-related questions or to exercise your rights, please contact us.