Korevra Technologies Limited ("Korevra") is the data controller for the personal data described here, processed under the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation. This policy covers recflow.io and the RecFlow application.
| Data | Purpose | Basis | Kept |
|---|---|---|---|
| Name, work email, password hash or Google identity | Sign-in, invitations, security notices | Contract | Life of the account, then 90 days |
| Institution name, members and roles | Operating your workspace | Contract | Life of the workspace |
| Plan, trial and subscription state; invoices; payment references | Billing, receipts, tax records | Contract; legal obligation | Seven years for financial records |
| Usage counts (runs, rows, exceptions per month) | Capacity, support, product decisions | Legitimate interest | 24 months |
| Audit trail of account and billing actions | Security and dispute resolution | Legitimate interest | 24 months |
| Campaign attribution (which page or advert brought you) | Measuring marketing | Consent (website analytics); legitimate interest (sign-up source) | 24 months |
| Support correspondence | Answering you | Contract | 24 months |
Reconciliation data is not collected. Files you load, the rows in them, results, treatments and exports are processed in your browser and never transmitted to Korevra. Any personal data inside those files is controlled by your institution under its own obligations.
You may ask for access to, correction or deletion of your personal data, object to or restrict processing, and receive a copy in a portable form. Write to support@korevra.com; we answer within 30 days. You may complain to the Nigeria Data Protection Commission. Workspace owners can remove members and close a workspace from Billing in the app.
Transport is encrypted, database access from browsers is denied by rule, payment webhooks are verified by signature, and access to production is limited to named Korevra staff. See Security.
The app uses only the storage it needs to keep you signed in and to hold your own reconciliation results on your device. recflow.io sets analytics cookies only after you choose Allow in the consent bar; Decline keeps the site fully usable.
We will post changes here with a new effective date and notify workspace owners of material changes by email.