Privacy Policy

Last updated July 28, 2026\

Last Updated: July 28, 2026\
Effective Date: July 28, 2026

Introduction

Makhaniel Innovations Ltd ("we," "our," or "us") operates Pulsac, a business management platform designed for Nigerian micro, small, and medium enterprises (MSMEs). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services.

We are committed to protecting your privacy and complying with the Nigeria Data Protection Regulation (NDPR) 2019 and other applicable data protection laws.

Contact Information:

  • Company: Makhaniel Innovations Ltd
  • Registration Number: RC 9569795
  • Tax ID: 2623033757060
  • Email: <[email protected]>
  • Address: Suite 5/6 Ultiads Plaza, Close to Elebu Police Station, Oritamerin Junction, Agberu Village, Elebu, Abese, Oyo

Information We Collect

Personal Information

When you create an account, we collect:

  • Full name
  • Email address
  • Phone number
  • Business name and type
  • Business address (optional)

Business Data

When you use Pulsac to manage your business, we collect:

  • Client information: Names, contact details, transaction history
  • Financial data: Sales, expenses, invoices, payments
  • Inventory data: Products, stock levels, pricing
  • Appointment data: Bookings, schedules, service history
  • Employee data: Staff names, roles, contact information

You are responsible for obtaining necessary consent from your clients and employees before entering their data into Pulsac.

Technical Data

We automatically collect:

  • Device information: Browser type, operating system, device identifiers
  • Usage data: Features accessed, pages viewed, time spent on pages
  • Authentication data: Login attempts, session information (stored securely via Supabase)
  • Offline data: Actions performed while offline are stored locally on your device and synced when you reconnect

Payment Information

When you make purchases through Pulsac:

  • Payment details are processed directly by SafeHaven (our payment processor)
  • We do not store your card details or bank account information
  • We receive confirmation of successful transactions and subscription status

How We Use Your Information

We use your information to:

  1. Provide and maintain our services
  • Process transactions and manage your account
  • Sync data across your devices
  • Provide offline functionality
  1. Improve our platform
  • Analyze usage patterns to enhance user experience
  • Debug technical issues
  • Develop new features
  1. Communicate with you
  • Send transaction confirmations and receipts
  • Provide customer support
  • Send SMS reminders (if you've provided a phone number and opted in)
  • Notify you about security alerts or policy changes
  1. Comply with legal obligations
  • Maintain financial records as required by Nigerian law
  • Respond to lawful requests from authorities
  • Enforce our Terms of Service

Legal Basis for Processing (NDPR Compliance)

Under the Nigeria Data Protection Regulation 2019, we process your personal data based on:

  • Consent: You've agreed to our Terms of Service and Privacy Policy
  • Contract performance: Processing is necessary to provide the services you've requested
  • Legitimate interest: Processing helps us improve and secure our platform (e.g., analytics, fraud prevention)
  • Legal obligation: Processing is required to comply with applicable laws

Data Sharing and Disclosure

We do not sell your personal data. We share data only in these circumstances:

Service Providers

We work with third-party services to operate Pulsac:

  • Supabase (hosting, authentication, database storage)
  • Data stored in secure cloud infrastructure
  • Compliant with international security standards
  • Supabase Privacy Policy
  • SafeHaven (payment processing)
  • Processes payment transactions
  • Does not share your payment details with us
  • SafeHaven Privacy Policy
  • Termii (SMS messaging)
  • Delivers SMS reminders when you've opted in
  • Only receives phone numbers and message content you authorize
  • Termii Privacy Policy

Legal Requirements

We may disclose your information if required by:

  • Court order or subpoena
  • Government investigation
  • Law enforcement request
  • To protect our rights, the safety of users, or the public

Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you of any change in ownership and your choices regarding your data.

With Your Consent

We may share information with your explicit consent.

Data Storage and Security

Where Your Data is Stored

  • Primary storage: Supabase cloud infrastructure (locations may vary based on your region)
  • Offline data: Stored locally on your device using IndexedDB
  • Backups: Encrypted backups maintained by Supabase

Security Measures

We implement multiple layers of security:

  • Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Authentication: Secure login via Supabase Auth with optional multi-factor authentication
  • Access control: Role-based permissions (Business Owner, Staff)
  • Data isolation: Multi-tenant architecture ensures your business data is isolated from other users
  • Regular audits: Security assessments and penetration testing
  • Offline security: Local data encrypted on your device

Data Retention

We retain your data for as long as your account is active or as needed to provide services:

  • Account data: Retained while your account exists
  • Transaction records: Retained for minimum 7 years per Nigerian tax law
  • Deleted accounts: Data anonymized or deleted within 90 days of account closure
  • Offline data: Remains on your device until you clear app data or uninstall

Your Rights Under NDPR

You have the right to:

  1. Access your data: Request a copy of the personal data we hold about you
  2. Rectification: Correct inaccurate or incomplete data
  3. Erasure: Request deletion of your data (subject to legal retention requirements)
  4. Data portability: Receive your data in a structured, machine-readable format
  5. Restriction: Request limitation of processing your data
  6. Objection: Object to processing based on legitimate interests
  7. Withdraw consent: Revoke consent at any time (without affecting prior processing)

To exercise these rights, contact us at **[email protected]**. We will respond within 30 days.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Maintain your login session
  • Remember your preferences (e.g., currency, language)
  • Analyze usage patterns (via PostHog analytics)

You can control cookies through your browser settings. Disabling cookies may affect platform functionality.

Analytics

We use PostHog for product analytics to understand how businesses use Pulsac and improve our service. PostHog collects:

  • Anonymized usage patterns
  • Feature adoption metrics
  • Error tracking

You can opt out of analytics tracking by contacting <[email protected]>.

Children's Privacy

Pulsac is designed for business use and is not intended for children under 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, contact us immediately.

International Data Transfers

Your data may be processed and stored outside Nigeria (e.g., Supabase cloud regions). When we transfer data internationally:

  • We ensure the recipient country provides adequate data protection
  • We use Standard Contractual Clauses (SCCs) where required
  • We comply with NDPR cross-border transfer requirements

Changes to This Policy

We may update this Privacy Policy periodically. We will:

  • Post the updated policy with a new "Effective Date"
  • Notify you via email or in-app notification for material changes
  • Obtain fresh consent if required by law

Your continued use of Pulsac after changes constitutes acceptance of the updated policy.

Contact Us

For privacy-related questions, requests, or complaints:

  • Email: <[email protected]>
  • Mail: Makhaniel Innovations Ltd, Suite 5/6 Ultiads Plaza, Close to Elebu Police Station, Oritamerin Junction, Agberu Village, Elebu, Abese, Oyo
  • In-app: Settings → Support → Privacy Concerns

Regulatory Authority

If you believe we have violated your data protection rights, you may file a complaint with the:

Nigeria Data Protection Bureau (NDPB)\
Plot 486, Cadastral Zone B06, Mabushi, Abuja\
Website: https://ndpb.gov.ng\\ Email: <[email protected]>

---

Thank you for trusting Pulsac with your business data.