Privacy Policy

Introduction

Crestline Software Limited (RC 9520500), a company incorporated in Nigeria and trading as Proquoti ("we", "our", "us"), is a software-as-a-service (SaaS) platform that provides construction estimation and quotation tools to contractors, quantity surveyors, and construction businesses across Nigeria.

We are committed to protecting your personal data in accordance with the Nigeria Data Protection Act (NDPA 2023) and applicable international privacy standards where relevant.

By creating an account or using Proquoti, you acknowledge and consent to the practices described in this Privacy Policy.

Scope

This Privacy Policy applies to all users of the Proquoti platform, including individuals, sole traders, registered businesses, contractors, and organizations, regardless of subscription tier.

It covers all data collected through our web application at app.proquoti.com, our marketing website at proquoti.com, and any related services or communications.

Information We Collect

3.1 Personal Information

• Full name
• Email address
• Phone number
• Company or business name

3.2 Business Data

• Project details and cost estimates
• Uploaded files (BOQs, drawings, supporting documents)
• Generated quotations and invoices
• Client details you enter for quotation purposes

3.3 Financial Data

• Payment status and subscription tier
• Transaction reference data (via third-party processors)

3.4 Technical Data

• IP address and approximate location
• Device identifiers and browser type
• Log data, session duration, and usage analytics

3.5 Compliance & Verification Data

• Identity verification information where required by law
• Business registration details where applicable

Legal Basis for Processing

We process personal data under the following lawful bases as recognised by the NDPA 2023:

• Consent — where you have given clear permission for specific processing activities
• Contract performance — to deliver the services you have subscribed to
• Legal obligation — to comply with NDPC directives, tax regulations, and other applicable laws
• Legitimate interests — for fraud prevention, system security, abuse detection, and platform analytics, where such interests do not override your fundamental rights

How We Use Your Information

We use your data solely for the following purposes:

• To provide, maintain, and improve Proquoti services
• To process subscription payments and manage billing
• To verify user identity where required by law (KYC/AML)
• To detect, prevent, and investigate fraud or platform abuse
• To communicate service updates, security alerts, and support responses
• To generate aggregated, anonymised analytics about platform usage
• To comply with legal and regulatory obligations

We will not use your data for purposes materially different from those listed above without obtaining your prior consent.

Data Sharing and Disclosure

We may share your data with the following categories of third parties, strictly for the purposes outlined in this Policy:

• Payment processors (e.g., Paystack) — for subscription billing
• Cloud infrastructure providers — for hosting and data storage (e.g., Supabase)
• Analytics and monitoring tools — for platform performance and error tracking
• Legal and regulatory authorities (NDPC, FIRS, CBN, FCCPC) — where required by law or court order

We ensure all third-party processors implement appropriate data protection safeguards, including data processing agreements where required.

Cross-Border Data Transfers

Some of our infrastructure providers may process data outside Nigeria. Where such transfers occur, we ensure:

• Adequate data protection standards are in place in the destination country
• Contractual safeguards (Standard Contractual Clauses or equivalent) are in force
• Compliance with NDPC guidance on international transfers

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Active service delivery for the duration of your subscription
• Compliance with legal retention periods (e.g., financial records for tax purposes)
• Resolution of disputes or enforcement of agreements

Upon account deletion, we will delete or anonymise your personal data within a reasonable period, except where retention is required by law.

Data Security

We implement industry-standard technical and organisational safeguards to protect your data, including:

• Encryption in transit (TLS) and at rest
• Role-based access controls limiting internal data access
• Audit logs and monitoring for unauthorised access attempts
• Secure, redundant infrastructure hosting

However, no system is completely secure. We cannot guarantee absolute security against all threats, including sophisticated cyberattacks. We encourage you to use strong passwords and protect your account credentials.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will:

• Notify affected users within a reasonable timeframe, subject to law enforcement considerations
• Report the breach to the Nigeria Data Protection Commission (NDPC) as required by NDPA 2023
• Take immediate steps to contain, investigate, and remediate the breach
• Provide guidance on protective steps you may take

Your Rights

Under the NDPA 2023, you have the following rights in relation to your personal data:

To exercise any of these rights, contact us at the details in Section 16. Requests will be processed within 30 days and may be subject to identity verification and applicable legal limitations.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Authenticate users and maintain secure sessions
• Remember your preferences and settings
• Analyse platform usage and improve performance

You may configure your browser to disable cookies, but this may affect the functionality of certain features, including login and session persistence.

Children's Privacy

Proquoti is a professional business tool intended solely for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If you believe a minor has registered on our platform, please contact us immediately and we will promptly delete the account and associated data.

Limitation of Liability

To the maximum extent permitted by applicable law, Proquoti shall not be liable for unauthorized access to, alteration of, or destruction of your data where such incidents occur as a result of events beyond our reasonable control, including sophisticated third-party cyberattacks, force majeure events, or user negligence (e.g., compromised credentials).

Our liability for privacy-related claims shall not exceed the amounts paid by you to Proquoti in the three (3) months preceding the incident giving rise to the claim.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Material changes will be communicated via email or an in-app notice at least 14 days before taking effect.

Continued use of Proquoti after the effective date of an updated Policy constitutes acceptance of the revised terms. If you do not agree with material changes, you may close your account before the effective date.

All previous versions of this Policy are archived and available upon request.

Contact Information

For privacy-related queries, requests to exercise your rights, or to contact our Data Protection Officer: