Privacy Policy

1. Introduction

PrimeLabs Limited ("we", "us", "our"), operating as DiBoss, is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our website and Services.

This policy is compliant with the Nigeria Data Protection Regulation (NDPR) 2019 and its implementation framework.

2. Information We Collect

Information you provide directly

• Name and contact information (email address, phone number)
• Business information (company name, domain name)
• Account credentials (username and password — passwords are encrypted)
• Payment information (processed securely by our payment partners — we do not store card details)
• Communications with us (WhatsApp messages, support emails)

Information collected automatically

• Usage data (pages visited, features used, time spent)
• Device and browser information
• IP address and approximate location
• Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

We use your personal information to:

• Provide, operate, and improve our Services
• Process payments and manage your subscription
• Send you important service communications (account updates, billing notices, security alerts)
• Respond to your support requests
• Detect and prevent fraud or misuse of our Services
• Comply with our legal obligations

We do not use your personal information for automated decision-making or profiling that produces legal or significant effects on you.

4. Legal Basis for Processing

Under the NDPR, we process your personal data on the following legal bases:

• Contract performance — to provide the Services you have subscribed to
• Legal obligation — to comply with applicable laws and regulations
• Legitimate interests — to improve our Services, prevent fraud, and ensure platform security
• Consent — for any processing where we have obtained your explicit consent

5. Data Sharing

We do not sell your personal data to third parties. We may share your data with:

• Payment processors — to handle subscription payments securely
• Hosting and infrastructure providers — to operate our platform (data is stored on servers within our control)
• Legal authorities — if required by law, court order, or regulatory requirement

Any third parties with whom we share data are required to maintain the confidentiality and security of your information and are prohibited from using it for any purpose other than providing services to us.

6. VaultX Tenant Data

If you are a VaultX tenant, your investors' personal data (collected through your branded platform) is your responsibility as data controller. PrimeLabs Limited acts as a data processor on your behalf for that data.

As a VaultX tenant, you are responsible for:

• Obtaining proper consent from your investors for data collection
• Providing your own privacy policy to your investors
• Complying with the NDPR and any other applicable data protection laws
• Responding to your investors' data subject requests

7. Cookies

We use essential cookies to keep you logged in and maintain your session. We may also use analytics cookies to understand how our platform is used, which helps us improve the experience.

You can control cookie settings through your browser. Disabling certain cookies may affect the functionality of our Services.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our Services. When you cancel your subscription:

• Your platform data is retained for 30 days before permanent deletion — giving you time to export any data you need
• Account and billing records are retained for 7 years for legal and tax compliance purposes

You may request earlier deletion of personal data, subject to our legal retention obligations.

9. Your Rights Under the NDPR

As a data subject under the NDPR, you have the right to:

To exercise any of these rights, contact us at support@diboss.net. We will respond to verified requests within 30 days.

10. Data Security

We implement technical and organisational measures to protect your personal data, including:

• Encrypted data transmission (SSL/TLS)
• Encrypted password storage
• Regular security audits and vulnerability assessments
• Access controls — only authorised personnel can access personal data
• Automated daily database backups with off-server storage

No method of data transmission over the internet is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

11. Children's Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at support@diboss.net and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the platform. Your continued use of our Services after any changes constitutes your acceptance of the updated policy.

We recommend reviewing this policy periodically to stay informed about how we protect your information.

13. Contact — Data Protection

For any privacy-related questions, requests, or complaints:

If you are not satisfied with our response to a privacy complaint, you have the right to lodge a complaint with the Nigeria Data Protection Bureau (NDPB).