Privacy policy
What we hold, why we hold it, who can see it, and how to make us delete it.
What this covers
How Rizekit collects, uses, stores and protects personal data, in line with the Nigeria Data Protection Act 2023.
What we collect
- Account details, your name, email address and phone number.
- Business details, your business name, sector, structure, registration numbers, address, team size and annual turnover.
- Documents, anything you upload to your vault, and anything we deliver into it.
- Payment records, the amount, method, reference and status of each transaction. Card details are held by our licensed payment provider, never by us.
- Usage, which screens you use and when, so we can improve the product.
Why we collect it
| What | Why |
|---|---|
| Account and business details | To provide the services you have paid for, and to work out which statutory obligations apply to you |
| Annual turnover | To warn you before you cross the ₦25 million VAT threshold |
| Documents | To store, deliver and share what you ask us to |
| Payment records | To take payment, issue receipts and meet our own record-keeping duties |
Who sees your data
- You, at any time, from your dashboard.
- The Rizekit specialist assigned to your order, and only while they are working on it.
- Regulators, where a filing requires it and you have asked us to make it.
- Anyone you share a document link with, for as long as that link remains live.
We do not sell your data. We do not share it with advertisers.
Document sharing
Share links you create are time-limited and expire on their own. You can revoke any link at any moment from your vault, which stops it working immediately.
How long we keep it
For as long as you have an account, and afterwards for as long as Nigerian law requires us to keep business and tax records. You can ask us to delete anything not covered by that duty.
Your rights
Under the Nigeria Data Protection Act 2023 you can ask us to:
- 1Tell you what personal data we hold about you.
- 2Correct anything that is wrong.
- 3Delete data we no longer need to keep.
- 4Give you a copy of your data in a portable form.
- 5Stop processing your data for a particular purpose.
Email privacy@rizekit.ng and we will respond within the statutory timeframe.
Security
Passwords are hashed and never stored in readable form. Sessions are signed and can be revoked. Changing your password signs out every other device. Documents are stored privately and served only to people you have authorised.
Cookies
We use one cookie: a signed session cookie that keeps you logged in. It is httpOnly, so scripts on the page cannot read it. We do not use advertising or tracking cookies.
Contact
Data protection enquiries: privacy@rizekit.ng
Last updated 29 August 2026.