Privacy Policy

This Privacy Policy explains how Blockspace Technologies Limited ("Blockspace", "we", "us", or "our") collects, uses, stores, and protects personal data when you access or use Klarify at klarify.africa and related services (the "Platform").

We are committed to handling your data responsibly and in line with applicable law, including the Nigeria Data Protection Act 2023 (NDPA) and guidance from the Nigeria Data Protection Commission (NDPC).

Blockspace Technologies Limited
Lagos, Nigeria
Email: hello@klarify.africa

For privacy-related requests, contact us at the email above with the subject line "Privacy Request".

Depending on how you use the Platform, we may collect:

• Account data: name, email address, authentication identifiers, and organisation details.
• Profile and onboarding data: product type, target markets, team size, compliance stage, and related profile fields you provide.
• Compliance and usage data: readiness scores, roadmap tasks, regulator interactions, ARIP tracker entries, calendar events, and notification preferences.
• AI interaction data: questions you ask, conversation history, classification inputs, and AI-generated responses.
• Document data: files you upload (such as regulatory letters), extracted text, analysis results, and generated compliance documents.
• Billing data: subscription plan, billing cycle, and payment references processed through our payment provider (we do not store full card details on our servers).
• Technical data: IP address, browser type, device information, log timestamps, and security-related events.

We use personal data to:

• Provide, operate, and improve the Platform and its features.
• Authenticate you and maintain your account and organisation workspace.
• Generate personalised compliance guidance, scores, roadmaps, and documents.
• Process subscriptions and send transactional emails (such as alerts, billing notices, and account messages).
• Respond to support requests and specialist introduction requests.
• Maintain security, prevent fraud, and enforce our Terms of Service.
• Comply with legal obligations and respond to lawful requests from authorities.

Under the NDPA, we rely on one or more of the following bases:

• Contract: processing necessary to provide the Platform you signed up for.
• Legitimate interests: securing the Platform, improving features, and operating our business, balanced against your rights.
• Consent: where required for optional communications or specific processing you opt into.
• Legal obligation: where we must retain or disclose data to comply with applicable law.

Klarify uses artificial intelligence to provide regulatory information and educational guidance. Your inputs may be sent to third-party AI providers to generate responses. AI outputs are not legal advice and should be reviewed with a qualified practitioner before reliance.

We do not use your uploaded regulatory documents or compliance data to train public foundation models. Processing is limited to delivering the service to you and your organisation.

We do not sell your personal data. We share data only with:

• Service providers that help us run the Platform (hosting, database, authentication, email, payments, cloud storage, OCR, and AI inference).
• Professional advisers where required (for example, lawyers or accountants under confidentiality).
• Regulators or law enforcement when required by applicable law or a valid legal process.
• Other members of your organisation workspace, as configured by your account and role.

Key subprocessors may include Supabase (authentication and database), cloud storage providers, Resend (email), Korapay (payments), and AI inference providers. We require appropriate contractual safeguards where data is processed on our behalf.

Some of our service providers may process data outside Nigeria. Where this occurs, we take steps to ensure appropriate safeguards consistent with the NDPA, such as contractual protections and limiting transfers to what is necessary to operate the Platform.

We retain personal data for as long as your account is active and as needed to provide the Platform, resolve disputes, enforce agreements, and meet legal obligations. You may request deletion of your account subject to exceptions (for example, billing records we must retain by law).

Subject to the NDPA and applicable exceptions, you may have the right to access, rectify, erase, restrict, or object to certain processing of your personal data, and to withdraw consent where processing is consent-based. You may also lodge a complaint with the Nigeria Data Protection Commission.

To exercise your rights, email hello@klarify.africa. We may need to verify your identity before responding.

We implement technical and organisational measures designed to protect personal data, including encryption in transit, access controls, and row-level security for organisation-scoped data. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

The Platform is intended for founders, operators, and professionals. It is not directed at children under 18, and we do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may also be communicated by email or in-product notice where appropriate.

Questions about this Privacy Policy or our data practices: hello@klarify.africa