Privacy policy
Last updated 14 October 2026
This policy explains how Primeloop collects and uses personal data in Primeloop Studio. We are the data controller for your account data, and we follow the Nigeria Data Protection Act 2023 (NDPA). For customer data you put into Studio (for example your own customers' information), you are the controller and we process it for you.
What we collect
- Account details: your name, email address and password (stored securely by our login provider).
- Your workspace content: website text Studio reads, documents you upload, posts, pictures, strategies, results and messages to the assistant.
- Connected accounts: access keys for accounts you connect (stored encrypted) and the results those platforms return.
- Billing: your plan, payments and receipts. Card and bank details go to Paystack and we never receive them.
- Technical data: basic logs (such as time and error details) to keep Studio secure and working.
Why we use it
To provide Studio to you (our contract with you), to keep it secure and prevent abuse (our legitimate interest), to bill you and keep records the law requires (legal obligation), and, if you agree, to send you product news (consent, which you can withdraw at any time). We don't sell your personal data and we don't use your content to train AI models.
Who processes it for us
We use these providers to run Studio, each under its own data protection terms:
- Render (hosting) and Supabase (database, file storage and sign-in).
- Anthropic (AI writing, research and the assistant), and Cloudflare or Google (AI pictures).
- Meta (only for accounts you connect), Pixabay (stock photo search) and Paystack (payments).
Some of these providers store or process data outside Nigeria. Where they do, we rely on the safeguards the NDPA allows, such as the providers' contractual data protection commitments.
Cookies
Studio uses only the cookies needed to keep you signed in and secure. We don't use advertising or tracking cookies.
How long we keep it
We keep your data while your account is open. When you close it, we delete your workspace data within 30 days, except records we must keep by law (such as payment records, kept for six years).
Your rights
You can ask to see, correct, export or delete your personal data, object to or restrict how we use it, and withdraw consent. Contact the contact email shown on this page once it is published; we reply within 30 days. You can also complain to the Nigeria Data Protection Commission (NDPC).
Security
Each business's data is kept separate in our database, connection keys and secrets are encrypted, traffic is encrypted, and access within Studio follows the roles you give your team.
Changes
If we change this policy in a way that matters, we'll tell you by email or in Studio before it takes effect.