Pulsac

Privacy Policy

Last updated 16 August 2026\

Last Updated: 16 August 2026\
Effective Date: 16 August 2026

Introduction

Makhaniel Innovations Ltd ("we," "our," or "us") operates Pulsac, a business management platform designed for Nigerian micro, small, and medium enterprises (MSMEs). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services.

We are committed to protecting your privacy and complying with the Nigeria Data Protection Act (NDPA) 2023, the supplementary provisions of the Nigeria Data Protection Regulation (NDPR) 2019 that remain in force, and other applicable Nigerian data protection law. Where the NDPR and the Act conflict, the Act prevails.

Contact Information:

  • Company: Makhaniel Innovations Ltd
  • Registration Number: RC 9569795
  • Tax ID: 2623033757060
  • Email: <privacy@makhaniel.com>
  • Address: Suite 5/6 Ultiads Plaza, Oritamerin Junction, Agberu Village, Elebu, Abese, Oyo State, Nigeria (near Elebu Police Station)

Information We Collect

Personal Information

When you create an account, we collect:

  • Full name
  • Email address
  • Phone number
  • Business name and type
  • Business address (optional)

Business Data

When you use Pulsac to manage your business, we collect:

  • Client information: Names, contact details, transaction history
  • Financial data: Sales, expenses, invoices, payments
  • Inventory data: Products, stock levels, pricing
  • Appointment data: Bookings, schedules, service history
  • Employee data: Staff names, roles, contact information

You are responsible for obtaining necessary consent from your clients and employees before entering their data into Pulsac.

Technical Data

We automatically collect:

  • Device information: Browser type, operating system, device identifiers
  • Usage data: Features accessed, pages viewed, time spent on pages
  • Authentication data: Login attempts, session information (stored securely via Supabase)
  • Offline data: Actions performed while offline are stored locally on your device and synced when you reconnect

Payment Information

When you make purchases through Pulsac:

  • Payment details are processed directly by PalmPay (our payment processor)
  • We do not store your card details or bank account information
  • We receive confirmation of successful transactions and subscription status

How We Use Your Information

We use your information to:

  1. Provide and maintain our services
  • Process transactions and manage your account
  • Sync data across your devices
  • Provide offline functionality
  1. Improve our platform
  • Analyze usage patterns to enhance user experience
  • Debug technical issues
  • Develop new features
  1. Communicate with you
  • Send transaction confirmations and receipts
  • Provide customer support
  • Send SMS reminders (if you've provided a phone number and opted in)
  • Notify you about security alerts or policy changes
  1. Comply with legal obligations
  • Maintain financial records as required by Nigerian law
  • Respond to lawful requests from authorities
  • Enforce our Terms of Service

Legal Basis for Processing (NDPA 2023)

Section 25 of the Nigeria Data Protection Act 2023 requires us to have a lawful basis for every processing activity. We rely on:

  • Consent: You have freely given specific, informed and unambiguous consent — for example, to receive SMS reminders or to be included in product analytics. You may withdraw consent at any time, and withdrawing it is as easy as giving it.
  • Contract performance: Processing is necessary to provide the services you have asked us for — creating your account, storing your business records, taking payment for a plan.
  • Legitimate interest: Processing helps us secure and improve the platform (fraud prevention, error monitoring, aggregate product analytics), balanced against your rights and freedoms.
  • Legal obligation: Processing is required to comply with Nigerian law, including tax and financial record-keeping requirements.

The supplementary provisions of the NDPR 2019 implementation framework continue to apply where they do not conflict with the Act.

Data Sharing and Disclosure

We do not sell your personal data. We share data only in these circumstances:

Service Providers

We work with third-party services to operate Pulsac:

  • Supabase (hosting, authentication, database storage)
  • Data stored in secure cloud infrastructure
  • Compliant with international security standards
  • Supabase Privacy Policy
  • PalmPay (payment processing)
  • Processes payment transactions
  • Does not share your payment details with us
  • PalmPay website
  • Termii (SMS messaging)
  • Delivers SMS reminders when you've opted in
  • Only receives phone numbers and message content you authorize
  • Termii Privacy Policy

Legal Requirements

We may disclose your information if required by:

  • Court order or subpoena
  • Government investigation
  • Law enforcement request
  • To protect our rights, the safety of users, or the public

Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you of any change in ownership and your choices regarding your data.

With Your Consent

We may share information with your explicit consent.

Data Storage and Security

Where Your Data is Stored

  • Primary storage: Supabase cloud infrastructure (locations may vary based on your region)
  • Offline data: Stored locally on your device using IndexedDB
  • Backups: maintained by our hosting provider (Supabase) as part of its managed database service

Security Measures

We implement multiple layers of security:

  • Encryption in transit: every connection to Pulsac uses HTTPS/TLS
  • Encryption at rest: managed by our hosting provider on the databases and backups holding your data
  • Authentication: secure login via Supabase Auth, with optional CAPTCHA protection on sign-in and sign-up
  • Access control: role-based permissions (Business Owner, Staff), and a per-business audit log of every change
  • Data isolation: every record is scoped to your business, so your data is not visible to other businesses on the platform
  • Session control: you can sign out of every device from Settings if a device is lost or stolen
  • Offline data: the offline copy of your records is stored in your browser on your own device. It is protected by your device and browser (screen lock, disk encryption), not separately encrypted by Pulsac — so treat a shared or unlocked device accordingly, and use "Sign out everywhere" if you lose one

Data Retention

We retain your data for as long as your account is active or as needed to provide services:

  • Account data: Retained while your account exists
  • Transaction records: Retained for minimum 7 years per Nigerian tax law
  • Deleted accounts: Data anonymized or deleted within 90 days of account closure
  • Offline data: Remains on your device until you clear app data or uninstall

Your Rights Under the NDPA

You have the right to:

  1. Access your data: Request a copy of the personal data we hold about you
  2. Rectification: Correct inaccurate or incomplete data
  3. Erasure: Request deletion of your data (subject to legal retention requirements)
  4. Data portability: Receive your data in a structured, machine-readable format
  5. Restriction: Request limitation of processing your data
  6. Objection: Object to processing based on legitimate interests
  7. Withdraw consent: Revoke consent at any time (without affecting processing already carried out on that basis)
  8. Lodge a complaint: Complain to the Nigeria Data Protection Commission (see below) — you do not have to come to us first

To exercise any of these rights, contact us at **privacy@makhaniel.com**. We will respond within 30 days, as required by the NDPA. If we need longer because a request is complex, we will tell you why within that period.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Maintain your login session
  • Remember your preferences (e.g., currency, language)
  • Analyze usage patterns (via PostHog analytics)

You can control cookies through your browser settings. Disabling cookies may affect platform functionality.

Analytics

We use PostHog for product analytics to understand how businesses use Pulsac and improve our service. PostHog collects:

  • Anonymized usage patterns
  • Feature adoption metrics
  • Error tracking

You can opt out of analytics tracking by contacting <support@makhaniel.com>.

Children's Privacy

Pulsac is designed for business use and is not intended for children under 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, contact us immediately.

International Data Transfers

Your data is processed and stored outside Nigeria. Our hosting and database provider (Supabase) runs in cloud regions outside Nigeria, and our payment, SMS, analytics and error-monitoring providers may also process data abroad.

Sections 41 and 43 of the NDPA 2023 permit such transfers on a stated lawful basis. We rely on:

  • Contractual safeguards: each provider is bound by a data processing agreement that requires a level of protection substantially similar to that provided under the Act, including Standard Contractual Clauses where the provider offers them.
  • Necessity for contract performance: the transfer is necessary to perform the contract between you and us — Pulsac cannot deliver your account, your records, your payments or your SMS reminders without these providers.

You may ask us at any time which providers process your data and where, by emailing <privacy@makhaniel.com>.

Changes to This Policy

We may update this Privacy Policy periodically. We will:

  • Post the updated policy with a new "Effective Date"
  • Notify you via email or in-app notification for material changes
  • Obtain fresh consent if required by law

Your continued use of Pulsac after changes constitutes acceptance of the updated policy.

Contact Us

For privacy-related questions, requests, or complaints:

  • Email: <privacy@makhaniel.com>
  • Mail: Makhaniel Innovations Ltd, Suite 5/6 Ultiads Plaza, Oritamerin Junction, Agberu Village, Elebu, Abese, Oyo State, Nigeria

Regulatory Authority

If you believe we have violated your data protection rights, you may file a complaint with the:

Nigeria Data Protection Commission (NDPC)\
Plot 486, Cadastral Zone B06, Mabushi, Abuja\
Website: <https://ndpc.gov.ng>\
Email: <info@ndpc.gov.ng>

The NDPC succeeded the Nigeria Data Protection Bureau (NDPB) under the Nigeria Data Protection Act 2023.

---

Thank you for trusting Pulsac with your business data.