🔒 Udala is built on the principle of data sovereignty. Your data is yours. Each company workspace runs in its own isolated database schema - we cannot mix your data with another organisation's, and we have no need to access it without your explicit permission.
1. Who we are
Udala ("we", "our", "us") is a multi-tenant SaaS ERP platform operated by Ide8tech Ltd, headquartered in Lagos, Nigeria. This policy explains how we handle data collected through udala.africa and the Udala application at app.udala.africa.
2. Data we collect
2.1 Data you provide directly
- Account data: Name, email address, company name, industry and country when you create a workspace.
- Business data: Financial records, employee data, customer contacts, invoices and other content you enter into Udala. This data is yours and lives exclusively in your tenant schema.
- Billing data: Payment method details handled by our payment processors (Paystack, Stripe, Flutterwave). We store only the last 4 digits of your card and transaction references - never the full card number.
- Support communications: Messages you send via our contact form or email.
- Waitlist submissions: Name, company and email address if you join our pre-launch waitlist.
2.2 Data collected automatically
- Usage data: Pages visited, features used, session duration - collected in aggregate to improve the product.
- Log data: IP address, browser type, referring URL, timestamps. Retained for 30 days for security purposes.
- Cookies: Session cookies required for authentication. No third-party advertising cookies.
3. How we use your data
- To provide, operate and improve the Udala platform
- To process payments and send billing receipts
- To send product updates, release notes and security alerts (you can opt out at any time)
- To respond to support requests
- To detect and prevent fraud and abuse
- To comply with legal obligations
We do not sell your data. We do not use your business data for advertising or share it with third parties for marketing purposes.
4. Data isolation and tenancy
Each Udala workspace runs in a dedicated PostgreSQL schema. This means:
- Your data is never stored in a shared table with another organisation's data
- A bug in one tenant's schema cannot expose another tenant's data
- Our staff access to any tenant's data requires explicit authorisation and is logged in our audit trail
5. Data sharing
We share data only with the following categories of sub-processors, each bound by data processing agreements:
- Hetzner Online GmbH - cloud infrastructure (EU/Germany)
- Cloudflare Inc - CDN, DNS, object storage (R2)
- Paystack / Stripe / Flutterwave - payment processing
- Twilio / Termii - SMS notifications
- Postmark / similar - transactional email
6. Data retention
Active workspace data is retained for as long as your subscription is active. If you cancel:
- Your data is retained for 30 days in case you reactivate
- After 30 days, all tenant data is permanently deleted from our servers
- You may request immediate deletion at any time by emailing privacy@udala.africa
7. Your rights
Depending on your jurisdiction, you may have the right to:
- Access a copy of the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Data portability (export your data in machine-readable format)
To exercise any of these rights, email privacy@udala.africa. We respond within 5 business days.
8. Security
We implement industry-standard security measures including:
- TLS 1.3 encryption in transit
- AES-256 encryption at rest
- bcrypt password hashing
- Two-factor authentication (available on all plans)
- Regular automated backups
- Role-based access control
9. Cookies
We use only strictly necessary cookies:
udala_session - Encrypted session token for authentication (expires on logout or 24 hours of inactivity)XSRF-TOKEN - CSRF protection token
We do not use tracking pixels, advertising cookies or third-party analytics cookies.
10. Children
Udala is a B2B enterprise platform. We do not knowingly collect data from persons under 18 years of age.
11. Changes to this policy
We will notify active subscribers by email at least 14 days before any material changes to this policy. The updated date at the top of this page reflects the most recent revision.
12. Contact
Privacy inquiries: privacy@udala.africa
General: hello@udala.africa
Address: Ide8tech Ltd, Lagos, Nigeria