Privacy Policy

Last updated: June 2, 2026

Tridax Limited ("we", "us") respects your privacy. This policy explains what we collect, why, and what choices you have.

1. Information we collect

You give us

  • Account info: name, email, password (hashed), company.
  • Payment info: handled by Paystack/Stripe; we store only the last 4 digits and provider reference.
  • Content you upload: documents, customer records, settings.
  • Communications: support emails, chat messages.

We collect automatically

  • Usage: pages visited, features used, errors encountered.
  • Device: IP, browser, OS, screen size.
  • Cookies: session, preferences, analytics (see Cookies Policy).

2. How we use it

  • Provide and maintain the Service.
  • Process payments and prevent fraud.
  • Send transactional emails (receipts, password resets, security alerts).
  • Send product updates and marketing — you can opt out anytime.
  • Improve features and fix bugs.
  • Comply with legal obligations.

3. Who we share with

We share data only with:

  • Service providers: hosting, email delivery, payment processors. Bound by data protection agreements.
  • Law enforcement: when legally required and only what's strictly necessary.
  • Acquirers: in a merger or acquisition, with continued protection of your data.

We do not sell your personal data.

4. Your rights

Depending on your jurisdiction, you have the right to:

  • Access the data we hold about you.
  • Correct inaccurate data.
  • Delete your data (subject to legal retention requirements).
  • Export your data in a portable format.
  • Object to processing for marketing purposes.
  • Lodge a complaint with a data protection authority.

Email tridaxlabs@gmail.com to exercise any of these.

5. Security

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Application secrets use AES-256-GCM. Passwords are bcrypt-hashed. Annual penetration testing. Access logs reviewed.

6. Retention

We keep your account data as long as your account is active. After cancellation, data is kept 30 days then deleted, except as required by law (e.g. tax records: 7 years).

7. International transfers

Data may be processed outside your country. Where applicable, we use Standard Contractual Clauses or equivalent safeguards.

8. Children

Tridax is not intended for users under 16. We do not knowingly collect data from children.

9. Changes

We will notify you of material changes by email at least 30 days before they take effect.

10. Contact

Data Protection Officer: tridaxlabs@gmail.com