Privacy Policy

Last updated: September 21, 2026

This Privacy Policy explains how Zylink Corp ("we," "us," "our") collects, uses, stores, and protects your data when you use Clid Business. We built this platform in Nigeria, for Nigerian businesses, and we hold ourselves to the highest standard of data protection.

1. What Data We Collect

From You (the Business Owner)

• Account information: Name, email address, phone number, business name.
• Bank details: Bank name, account number, account name. Used solely for Flutterwave payment settlement.
• Usage data: How you use the dashboard (pages visited, features used, login times). Used to improve the product.
• Device data: IP address, browser type, device type. Used for security and fraud prevention.

From Your Customers (via your store)

• Order information: Name, email, phone number, delivery address, items purchased, amount paid.
• Payment information: Processed by Flutterwave. We do not store card numbers, CVVs, or PINs. Flutterwave handles all payment data under their own PCI-DSS compliance.

2. How We Use Your Data

• To operate your store, process orders, and deliver your services.
• To process subscription payments via Flutterwave.
• To send you important notifications (new orders, payment confirmations, subscription renewal reminders).
• To provide customer support when you contact us.
• To detect and prevent fraud, abuse, and unauthorized access.
• To improve our platform (aggregate, anonymized analytics only).

We do NOT use your data to:

• Sell to third parties.
• Send marketing emails you did not opt into.
• Build advertising profiles.
• Train AI models on your private business data without your explicit consent.

3. Data Storage and Security

Your data is stored on:

• Cloudflare D1 databases (encrypted at rest with AES-256).
• Cloudflare R2 storage (for product images and files, encrypted at rest).
• Cloudflare Workers (for application logic, running on the global edge network).

Security measures we take:

• TLS 1.3 encryption for all data in transit.
• AES-256 encryption for all data at rest.
• Daily automated backups.
• WebAuthn passkey authentication (no passwords to steal).
• Rate limiting and IP blocking for suspicious activity (Ampere security bot).
• Security headers (HSTS, X-Frame-Options, X-Content-Type-Options) on every response.
• Secrets stored in Cloudflare's encrypted vault (never in code or databases).

4. Data Retention

• Active accounts: Your data is kept as long as your subscription is active.
• Cancelled accounts: Your data is retained for 30 days after cancellation, then permanently deleted.
• Transaction records: Order and payment records are kept for 7 years as required by Nigerian tax law (CITA).
• Audit logs: Kept for 90 days, then automatically pruned.

5. Your Rights

You have the right to:

• Access: View all data we hold about you. Request a data export from your dashboard.
• Correct: Update your personal information at any time from your dashboard settings.
• Delete: Request permanent deletion of your account and all associated data. We process this within 30 days.
• Export: Download all your data (products, orders, customers, settings) in JSON format at any time.
• Object: Object to specific uses of your data (e.g., analytics). Email privacy@zylinkcorp.com.ng.

6. Your Customers' Data

When customers shop on your store, they provide their name, email, phone, and delivery address. This data belongs to YOU (the business owner), not to Clid Business. We are the processor; you are the controller.

You are responsible for:

• Informing your customers that their data is collected and how it is used (a simple privacy notice on your store checkout page is sufficient).
• Handling customer requests for data access, correction, or deletion.
• Ensuring your use of customer data complies with the Nigeria Data Protection Act 2023.

We will never contact your customers directly, except for transactional emails (order confirmations, receipts) sent through your store.

7. Flutterwave and Third Parties

We use Flutterwave to process payments. Flutterwave is a PCI-DSS Level 1 certified payment processor. When a customer pays on your store, their payment data goes directly to Flutterwave. We never see, store, or transmit card numbers.

We also use:

• Cloudflare: For hosting, CDN, DDoS protection, and DNS. Cloudflare's privacy policy applies to their services.
• Resend: For sending email receipts and notifications. Resend processes email addresses only.
• Google/Groq/Z.ai: For AI features (Vortex). Only prompts you explicitly send are processed. Your data is not used to train their models.

8. Cookies

Clid Business uses minimal cookies:

• Session cookie (clid_session): Keeps you logged in. Deleted when you close your browser.
• Theme preference (clid-theme): Remembers if you prefer dark or light mode.

We do NOT use:

• Advertising cookies (Google Ads, Facebook Pixel, etc.)
• Third-party tracking cookies
• Analytics cookies that identify individuals

9. Data Breach Response

If we discover a data breach that affects your data, we will:

• Notify you within 72 hours of discovery.
• Provide details of what data was affected.
• Take immediate steps to contain and fix the breach.
• Report to the Nigeria Data Protection Commission (NDPC) as required by law.

10. Children's Privacy

Clid Business is not for children. You must be 18 or older to create an account. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email at least 14 days before any changes take effect. The updated version will be posted on this page with a new "Last updated" date.

12. Contact

For privacy questions or data requests:

• Email: privacy@zylinkcorp.com.ng
• Phone: +234 (0) 700 ZYLINK
• Address: Zylink Corp, Port Harcourt, Rivers State, Nigeria

You may also file a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.