This Privacy Policy explains how PromoYield (“PromoYield”, “we”, “us” or “our”), a software service operated from Nigeria, handles personal information when you visit promoyield.com, create an account or use our promotion-planning and analytics service.
1. Who controls your information
PromoYield is the controller of personal information collected directly through the service. For privacy enquiries or requests, email privacy@promoyield.com.
2. Information we collect
- Account information: name, email address, password hash, workspace name, country, preferred currency and account role.
- Campaign information: campaign names, dates, channels, prices, costs, volumes, notes, forecasts and actual results that you choose to enter.
- Billing information: plan, billing cycle, transaction reference, payment status and limited payment metadata. Card and bank details are processed by Paystack and are not stored by PromoYield.
- Security information: verification status, multi-factor authentication settings, recovery-code hashes, login/session data and security logs.
- Technical information: IP address, browser/device information, request logs and essential cookie identifiers.
- Communications: messages and supporting information you send to our support, billing or privacy teams.
3. Why we use it
| Purpose | Typical legal basis |
|---|---|
| Create accounts, calculate forecasts, store campaigns and provide reports | Performing our contract with you |
| Process subscriptions, receipts and account administration | Contract and legal obligations |
| Protect accounts, prevent abuse and maintain service reliability | Legitimate interests and legal obligations |
| Send verification, security, billing and service messages | Contract and legitimate interests |
| Send optional marketing communications | Consent where required; you may unsubscribe at any time |
| Improve features using aggregated or de-identified usage information | Legitimate interests |
4. When we share information
We share only what is reasonably necessary with service providers that support hosting, email delivery, payment processing, security, diagnostics and customer support. We may also disclose information when required by law, to protect users or the service, during a corporate transaction, or when you direct us to do so. We do not sell personal information.
5. International transfers
Our users and providers may be located in different countries. Where personal information is transferred internationally, we use appropriate contractual, organisational and technical safeguards required by applicable law.
6. Retention
We retain account and campaign information while your account is active and for a reasonable period afterwards to provide the service, resolve disputes, prevent fraud and meet tax, accounting and legal obligations. Security logs and backups may be retained for shorter operational cycles. We delete or de-identify information when it is no longer required.
7. Security
We use measures designed to protect information, including encrypted transport, password hashing, access controls, secure sessions, multi-factor authentication options, audit logging and backups. No online system can be guaranteed completely secure, so please use a unique password and protect your recovery codes.
8. Your privacy rights
Depending on your location and applicable law, you may request access, correction, deletion, restriction, objection or portability of your personal information, withdraw consent, and complain to a data-protection regulator. Nigerian users may complain to the Nigeria Data Protection Commission. EEA and UK users may contact their local supervisory authority. California residents may also have rights to know, correct or delete personal information and to opt out of its sale or sharing. PromoYield does not sell personal information or use it for cross-context behavioural advertising.
Send requests to privacy@promoyield.com. We may verify your identity before completing a request. Rights are not absolute and lawful exceptions may apply.
9. Children
PromoYield is a business service intended for people aged 18 or older. We do not knowingly collect personal information from children.
10. Changes to this policy
We may update this policy as the service or law changes. We will publish the revised date and provide additional notice when a material change requires it.