1. Who This Policy Applies To

This Privacy Policy applies to all users of the Topzalt platform, including:

• Workspace owners — business owners who create and manage a Topzalt account.
• Operators — staff members granted cashier or operator access by a Workspace owner.
• Floor staff — staff members granted service-level access by a Workspace owner.
• Visitors — anyone who visits topzalt.adadid.com without creating an account.

The platform is operated by AdaDid, owned by Nnanna Uma. Contact: studio@umanographics.com · 08038158125.

2. What Data We Collect

2.1 Data You Provide Directly

Data type	When collected	Why we collect it
Business name	Account registration	To identify your Workspace
Owner name and contact	Account registration	Account management and support
Staff names and usernames	When you create staff accounts	To attribute activity to named individuals
Staff PINs	When you create or update staff accounts	Authentication for floor and operator portals
Service catalogue (names and prices)	When you configure services	To populate operator menus and generate tokens
Payment method preferences	At subscription checkout	Billing

2.2 Data Generated by Platform Use

Data type	Source	Purpose
Token records (code, service, price, timestamp)	Every transaction	Reconciliation, audit trail, owner reporting
Staff session logs (who logged in, when, duration)	Every staff login	Accountability and shift reporting
Payment method per transaction	Operator input	Cash vs. transfer reconciliation
Cash count declarations	Operator input when prompted	Owner dashboard and variance detection
AI query logs (Ask Ada)	Owner input	Usage tracking, token billing
Internal messages	Owner and operator input	Communication records within Workspace

2.3 Data Collected Automatically

• Device and browser type — for compatibility and error diagnosis.
• IP address — for security monitoring and fraud prevention.
• Session tokens — stored in your browser's local storage to keep you logged in.
• Usage patterns — aggregate, anonymised data on feature usage to improve the platform.

We do not use third-party advertising trackers, cookies for marketing purposes, or pixel tracking of any kind.

3. How We Use Your Data

We use the data we collect for the following purposes:

• Running the platform — processing tokens, maintaining session authentication, generating reconciliation reports.
• Billing — processing subscription payments and tracking token usage.
• Support — diagnosing and resolving technical issues reported by users.
• Security — detecting and preventing unauthorised access, fraud, or misuse.
• Product improvement — using anonymised, aggregated data to improve features and performance.
• Legal compliance — meeting obligations under applicable Nigerian law.

We do not use your data for advertising, profiling, or any purpose not listed above.

4. Data Sharing and Disclosure

We do not sell your data. We do not share your data with advertisers. We do not share your business transaction records with any third party except in the following limited circumstances:

• Service providers — we use trusted infrastructure providers (including Vercel for hosting and Upstash/Redis for data storage) to run the platform. These providers process data only on our behalf and under strict data processing agreements.
• Payment processors — if you pay for a subscription, payment is processed by our payment partner (currently Selar). We do not store card details.
• Legal requirements — we may disclose data if required to do so by a valid court order, law enforcement request, or other legal obligation under Nigerian law. We will notify you of such requests to the extent permitted by law.
• Business transfers — in the event of a merger, acquisition, or sale of AdaDid, your data may be transferred to the acquiring entity. You will be notified in advance and given the option to delete your account before any such transfer.

5. Staff Data — A Note for Workspace Owners

When you enter your staff members' names, usernames, and activity data into Topzalt, you become the data controller for that information. This means:

• You are responsible for informing your staff that their activity is being recorded through the platform.
• You are responsible for ensuring your use of staff data complies with Nigeria's Employee Compensation Act, the Nigeria Data Protection Act 2023, and any applicable employment regulations.
• Topzalt acts as a data processor on your behalf for staff data — we store and surface it at your direction, but we do not independently use or analyse it.

6. Data Storage and Security

Your data is stored on secure cloud infrastructure with the following protections:

• Encryption in transit (HTTPS/TLS) for all data sent between your browser and our servers.
• Encryption at rest for all data stored in our database.
• Session tokens with automatic expiry to limit the window of unauthorised access.
• Role-based access controls — staff accounts can only access the portions of the platform appropriate to their role.
• Append-only transaction logs — past records cannot be modified or deleted by staff.

No system is perfectly secure. In the event of a data breach that affects your personal data, we will notify you within 72 hours of becoming aware of it and take all reasonable steps to contain and remediate the breach.

7. Data Retention

Data type	Retention period
Transaction and token records	Duration of active subscription + 90 days after termination
Staff account data	Duration of active subscription + 90 days after termination
Billing records	7 years (as required by Nigerian tax and financial regulations)
AI query logs	90 days rolling
Internal messages	Duration of active subscription + 90 days
IP logs and security events	90 days rolling

After the applicable retention period, data is permanently deleted from our servers. You may request early deletion of your data at any time (see Section 9).

8. Cookies and Local Storage

Topzalt uses browser local storage (not traditional cookies) to store your session token and workspace preferences on your device. This is strictly necessary for the platform to function. We do not use third-party tracking cookies, advertising cookies, or analytics cookies.

You can clear local storage at any time through your browser settings. Doing so will log you out of the platform.

9. Your Rights

Under the Nigeria Data Protection Act 2023 and applicable law, you have the right to:

• Access — request a copy of all personal data we hold about you.
• Correction — request that we correct any inaccurate data.
• Deletion — request that we delete your personal data, subject to legal retention requirements.
• Data portability — request an export of your Workspace data in a readable format.
• Objection — object to any processing of your data that you believe is not justified.
• Withdrawal of consent — where processing is based on your consent, withdraw it at any time (this does not affect the lawfulness of processing before withdrawal).

To exercise any of these rights, contact us at studio@umanographics.com. We will respond within 10 business days. We may ask you to verify your identity before processing your request.

10. Children's Privacy

Topzalt is a business software platform and is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided data through the platform, contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify active Workspace owners by email at least 14 days before the changes take effect. The updated policy will be posted on this page with a revised "Last updated" date. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

12. Contact and Complaints

For any privacy-related questions, data requests, or complaints:

• Email: studio@umanographics.com
• Phone / WhatsApp: 08038158125
• Platform: topzalt.adadid.com

If you are unsatisfied with our response to a complaint, you may escalate to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.