How Hyrax handles personal data on the invoicing platform.

Hyrax Invoice is operated by Hyrax Information Technology Solutions and Consultancy Ltd (“Hyrax”, “we”, “us”, or “our”). This Privacy Policy explains how we collect, use, store, share, protect, and otherwise process personal data when you use Hyrax Invoice, our website, our support channels, and related business services.

This policy is drafted to reflect generally accepted privacy and data protection principles and should be read alongside the laws that apply in the countries where we operate and where our customers use the service.

For account, billing, support, security, and platform administration data, Hyrax generally acts as a data controller because we decide why and how that data is processed.

For customer, invoice, payment, contact, and similar business records that workspace users upload or generate inside Hyrax Invoice, Hyrax generally acts as a data processor or service provider on behalf of the relevant workspace owner or business user. The workspace owner remains responsible for ensuring that personal data uploaded to the platform was collected lawfully and that the necessary notices, permissions, and lawful bases exist.

We may collect account and profile data such as names, email addresses, phone numbers, passwords, role information, business details, tax identifiers, workspace settings, and uploaded company logos.

We may collect workspace content such as customer records, invoice details, line items, notes, receipts, payment records, and business contact data entered by users.

We may collect technical and usage data such as IP addresses, browser and device details, timestamps, audit logs, session data, diagnostics, and security-related activity needed to operate and protect the service.

We may collect communication data when you contact us for support, sales, account recovery, dispute handling, or compliance matters.

We process personal data to create and manage workspaces, authenticate users, generate invoices and receipts, support payment tracking, deliver downloadable documents, maintain audit trails, respond to support requests, and keep the platform available and secure.

Depending on the context, our lawful bases may include performance of a contract, compliance with legal obligations, legitimate interests such as fraud prevention and service security, and consent where consent is the appropriate legal basis.

Where you upload third-party data into the platform, you are responsible for identifying and documenting your own lawful basis for that processing.

We may share data with hosting providers, infrastructure vendors, email and communications providers, security providers, backup providers, professional advisers, payment-related service providers, and other processors or sub-processors that help us operate the service.

We may also disclose data where required by law, regulation, court order, lawful request from a competent authority, or where necessary to establish, exercise, or defend legal claims.

We do not sell personal data as part of the ordinary operation of the platform.

Some service providers that help us operate Hyrax Invoice may process data outside your country or region. Where this occurs, we take reasonable steps to use appropriate contractual, organisational, or technical safeguards where required by applicable law.

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, misuse, unauthorised disclosure, alteration, or access. These measures may include access controls, authentication, encrypted transmission, audit logging, backup controls, and least-privilege operational practices.

No platform can guarantee absolute security. To the fullest extent permitted by applicable law, Hyrax is not responsible for losses arising from phishing, weak or reused passwords, compromised user devices, insecure email accounts, sharing of credentials by users, or personal data uploaded to the platform without lawful authority by a workspace user or customer.

Nothing in this Privacy Policy excludes obligations, liabilities, or data subject rights that cannot lawfully be limited or excluded under applicable law.

We retain personal data for as long as reasonably necessary for the purposes described in this policy, including account administration, document generation, security, dispute handling, backup recovery, compliance, and enforcement of our legal rights.

Where data is no longer required, we will delete, anonymise, or securely archive it in line with our retention and backup practices, subject to legal, tax, accounting, or regulatory obligations that require longer retention.

Subject to applicable law and any lawful limitations, data subjects may have the right to request access, correction, erasure, restriction, withdrawal of consent, objection to processing, portability, and a copy of information about how their data is handled.

A data subject may also complain to the relevant privacy or data protection regulator where they believe their rights have been violated. Where Hyrax acts only as a processor for workspace content, we may direct the request to the relevant workspace owner or support them in responding.

If we become aware of a personal data breach affecting data under our control, we will investigate, contain, document, and respond in line with applicable law. Where required, we will notify affected individuals and relevant regulators within the timelines required by law.

Hyrax Invoice is intended for business and professional use and is not directed at children. If you believe a child has provided personal data to us without proper authorisation, contact us and we will review the matter.

We may update this Privacy Policy from time to time to reflect legal, regulatory, technical, operational, or product changes. When we make material changes, we may update the date on this page and provide additional notice where appropriate.

For privacy requests, questions, or complaints, contact us at mail@hyrax.com.ng or 08029115964. You may also write to us through the contact details published on https://invoice.hyrax.com.ng. If you remain dissatisfied, you may escalate a complaint to the regulator or authority that applies in your location.