Privacy Policy

This Privacy Policy explains how Geoflow (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you use trygeoflow.com and the Geoflow platform. It is written in plain language and aligned with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act (NDPA).

A human lawyer should review this policy before you treat it as final legal advice.

1. Who we are

Geoflow provides software for surveyors, engineering firms, and related teams to manage projects, coordinates, clients, plans, and verification workflows.

Contact for privacy requests: info@trygeoflow.com or through our Contact page.

2. What data we collect

Depending on how you use Geoflow, we may collect:

• Account and firm data — name, email, phone number, company name, address, role, and login credentials.
• Surveyor KYC / verification data — professional registration details, licence or membership numbers, identity documents or images you upload for verification, and related compliance records.
• Project and coordinate data — project names, plan numbers, addresses, LGA/state, projections/zones, pillar numbers, eastings/northings, roads, drawings, templates, and exported plans or reports.
• Client details — client names, contact details, and other information your firm stores in Geoflow while managing jobs.
• Billing and support data — subscription status, payment references (processed by payment providers), invoices, demo requests, and support messages.
• Technical and usage data — IP address, device/browser information, approximate location derived from IP, cookies, and product analytics events (if you allow analytics cookies).

3. Why we use your data

• To create and manage accounts, subscriptions, and firm workspaces.
• To verify surveyor identity and professional standing (KYC) where required for trust features.
• To store and process project, coordinate, and client records you enter into the platform.
• To provide customer support, security monitoring, and product improvements.
• To meet legal, regulatory, and audit obligations, including NDPR/NDPA requirements.
• To send important service notices; marketing emails only where permitted and with an unsubscribe option.

4. How data is stored and protected

Geoflow stores data on secured cloud infrastructure with access controls, encrypted connections (HTTPS/TLS) in transit, and industry-standard safeguards at rest where supported by our hosting providers. Access to production systems is limited to authorised personnel under role-based permissions. We do not sell personal data.

More detail is available on our Trust & Security page.

5. How long we keep data

We retain personal data only as long as needed for the purposes above, including:

• Active account and project data for as long as your subscription/account remains active.
• KYC and verification records for as long as needed to maintain trust features and meet compliance obligations.
• Billing and transaction records for periods required by tax and commercial law.
• Support tickets and logs for a reasonable period to resolve disputes and improve security.
• After account closure or a valid deletion request, we delete or anonymise data within a reasonable period unless retention is required by law or for legitimate security/dispute needs.

6. Sharing and processors

We may share data with trusted processors who help us run Geoflow (hosting, email delivery, payments, analytics). They may process data only under our instructions and applicable agreements. We may also disclose data when required by law, regulation, or to protect rights and safety.

Where a firm uses Geoflow to store client or project data, that firm typically acts as the data controller for those records; Geoflow acts as a processor. See our Data Processing Agreement / NDPR Compliance Statement.

7. Your rights under NDPR / NDPA

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of personal data (subject to legal retention needs).
• Request a portable export of your data in a commonly used format.
• Object to or restrict certain processing, including marketing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) or other competent authority.

8. How to request deletion or export

Email info@trygeoflow.com with the subject “Data request”, include the account email, and state whether you want an export, correction, or deletion. We will verify your identity and respond within the timelines expected under NDPR/NDPA. Firm administrators may also manage workspace users and project records from within the product where those controls are available.

9. Cookies

We use necessary cookies to run the site and optional analytics cookies if you consent. See our Cookie Policy and the on-site cookie banner to manage preferences.

10. Children

Geoflow is a business platform and is not directed at children. We do not knowingly collect personal data from children for consumer use of the product.

11. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be communicated by email or in-product notice.