Privacy policy
This policy explains what personal data KztOne collects, why, how long we keep it and the choices you have. KztOne is operated by Kingzitech Digital Solutions, 27 Yemi Adetayo Street, Lekki, Lagos, Nigeria.
Last updated 22 October 2026
1. Who we are and how to reach us
Kingzitech Digital Solutions (“Kingzitech”, “we”, “us”) is the data controller for the KztOne website and for account data about our customers. For the business records our customers store inside their KztOne workspace (their contacts, orders, invoices and conversations), the customer is the controller and Kingzitech processes that data on their instructions.
Privacy questions and requests: info@kingzitech.com, or by post to the address above.
2. What we collect
We collect only what is needed to provide the service.
- Account data: name, email address, phone number, password (stored hashed), workspace name, country and industry.
- Billing data: plan, invoices, payment references and the last four digits of a card. Full card numbers are handled by Paystack or Stripe and never reach our servers.
- Workspace data you enter or import: contacts, products, stock, orders, invoices, expenses, documents, workflow settings and WhatsApp conversations routed through KztOne.
- Usage data: pages visited, actions taken, AI credits used, device and browser type, IP address and approximate location, used for security, support and improving the service.
- Website enquiries: details you submit through contact, demo or newsletter forms.
3. Why we use it
We process personal data on the following bases under the Nigeria Data Protection Act 2023 and, where applicable, the GDPR and UK GDPR.
- To provide the service you signed up for (performance of a contract).
- To bill you, prevent fraud and keep the platform secure (legitimate interests and legal obligations).
- To send service messages such as verification emails, invoices and security alerts (contract).
- To send product updates you asked for (consent, which you can withdraw at any time).
- To comply with law, for example tax and accounting record-keeping.
4. AI features
The KztOne assistant, agents and WhatsApp auto-replies send the relevant parts of your workspace data to AI model providers to generate answers and drafts. We send only the data needed for the request, we do not use your data to train our own models, and our providers are contractually prohibited from using it to train theirs. You can switch AI features off per workspace.
5. WhatsApp Mark
WhatsApp messages sent and received through KztOne pass through Meta’s WhatsApp Business Platform under Kingzitech’s business account. Meta processes message metadata under its own terms. Message content is stored in your workspace so your team can see conversation history. Customers can opt out at any time by replying STOP; we record opt-outs and never re-subscribe someone from an import.
6. Who we share data with
We never sell personal data. We share it only with providers who help us run the service, under contracts that restrict what they can do with it:
- Hosting and database providers for storage and backups.
- Paystack and Stripe for subscription payments.
- AI model providers for the AI features described above.
- Meta (WhatsApp Business Platform) for WhatsApp messaging.
- Email delivery providers for transactional email.
- Authorities, where the law requires it.
7. International transfers
Some providers are located outside Nigeria. Where personal data leaves Nigeria or the EEA, we rely on adequacy decisions or standard contractual clauses and the safeguards required by the NDPA.
8. How long we keep data
Account and workspace data is kept while your account is active. After cancellation, workspace data is retained for 90 days so you can export it or reactivate, then deleted from live systems; backups expire within a further 35 days. Billing records are kept for the period required by Nigerian tax law. Website enquiries are kept for 24 months.
9. Security
Each workspace is isolated at the database level with row-level security. Credentials for connected services are encrypted at rest. Access by Kingzitech staff for support is time-limited and recorded in your workspace audit log. Passwords are hashed and never stored in plain text. We maintain continuous backups and test recovery.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal data, to object to processing, and to withdraw consent. Workspace owners can export every record from the billing page and delete the workspace from settings. For anything else, email info@kingzitech.com; we respond within 30 days. You may also complain to the Nigeria Data Protection Commission or your local authority.
11. Cookies
We use strictly necessary cookies to keep you signed in and to remember preferences such as your currency. We do not use third-party advertising cookies. Analytics, where used, is configured to avoid storing personal identifiers.
12. Children
KztOne is a business tool and is not directed at anyone under 18.
13. Changes
We will post changes here and, for material changes, notify workspace owners by email before they take effect.