Privacy Policy

This Privacy Policy explains how PegBit Technologies Ltd (“PegBit”, “we”, “us”) collects and uses personal information across every surface we operate: the public website at pegbitstudio.com, the AI Brief feature, the PegBit client portal at clients.pegbitstudio.com, and the Growth Partner / Channel Partner referral program.PegBit Technologies Ltd (company registration number RC 9513533) is registered in Lagos, Nigeria, and is the data controller for the information described below, except where this policy says otherwise (for example, where we process data as a processor on a client’s behalf under a signed Data Processing Agreement, in which case that agreement governs).

If you are a client under a signed Master Service Agreement, Statement of Work, or Data Processing Agreement, those documents take precedence over this policy for anything they specifically address. This policy fills the gaps and covers everyone else — visitors, prospective clients, referral partners, and portal users generally.

1. Information we collect

We keep data collection to what each feature actually needs. What we collect depends on how you interact with us:

• Contact form details. When you submit the contact form, we collect the name or organisation, email address, and message you provide, so we can respond to your enquiry.
• AI Brief inputs. When you use the AI Brief, we process the problem description, existing data infrastructure, timeline, and budget range you enter in order to generate a response. Timeline and budget are optional.
• Growth Partner / Channel Partner Program details. We don’t run this program through a form on the site — you reach us by WhatsApp or email. What you send us (your name, the business you’re introducing, why they might be a fit, and your contact details) is what we collect. If a referral turns into a paid engagement, we also collect what we need to pay your reward — typically your name, phone number or email, and the bank or payment details you give us directly for the transfer. We do not collect payout details through the website; they are exchanged with us directly by WhatsApp, email, or phone.
• Client portal accounts. To sign in to clients.pegbitstudio.com you provide an email address, which we use to send a one-time magic sign-in link. Once your account exists, we hold your name, email address, role (staff or client), and — for client users — the company you’re linked to. Project and document metadata associated with your account (project names, phases, status, and, once e-signature is enabled, document status and signing events) is also held in the portal. Content of contracts and other documents exchanged through the portal is governed additionally by the Master Service Agreement, Statement of Work, and Data Processing Agreement you or your organisation has signed with us.
• Technical data. Standard server and security information such as your IP address, request metadata, and (for the portal) session tokens used to keep you signed in, for rate limiting, authentication, and to protect the service from abuse.

2. How we use your information

• To respond to enquiries you send us.
• To generate an AI Brief you request.
• To track, evaluate, and pay rewards under the Growth Partner / Channel Partner Program.
• To authenticate you, run your client portal account, and show you the projects and documents that belong to your organisation (and no one else’s).
• To operate, secure, and rate-limit our services.
• To comply with legal, tax, and regulatory obligations.

We do not sell your personal information, and we do not use your private inputs to train shared AI models.

3. The AI Brief feature

The AI Brief sends the information you type into it (such as your problem description, existing data infrastructure, timeline, and budget range) to a third-party AI provider (Anthropic) to generate a tailored response. That text is transmitted solely for the purpose of producing your brief. We do not use your inputs to train AI models, and the response is generated on demand rather than stored to build a profile of you. Please don’t enter sensitive personal data or confidential information into the tool. If the feature is unavailable, it fails gracefully and no brief is generated.

4. The client portal

The client portal is invite-only — there is no public sign-up. Staff create your account, and you sign in using a one-time “magic link” sent to your email address rather than a password. That means we never store a password for you. A client-role account can only ever see the projects and documents linked to its own organisation; this is enforced at the level of how the portal reads data, not just hidden in the interface. Staff-role accounts, used only by PegBit personnel, can see across client organisations as needed to deliver the work.

Signing in sets an essential session cookie so the portal knows you’re authenticated; this cookie is required for the portal to function and isn’t used for tracking or advertising. Sessions can be revoked on our end if needed (for example, if an account is compromised or an engagement ends).

As the portal’s e-signature functionality comes online, it will handle signed documents (contracts, change orders, acceptance sign-offs) on our behalf and on behalf of our e-signature provider. We’ll update this section with the provider’s name once that integration is live.

5. The Growth Partner / Channel Partner Program

The referral program runs informally, over WhatsApp, phone, or email rather than a form on the site — see the program page for current reward terms. We use what you send us only to credit your introduction, evaluate whether it qualifies, and — where a reward is owed — pay it and keep a record for our own accounting and tax purposes. We don’t share your details with the business you introduce, or with anyone else, beyond what’s needed to process the reward (for example, our bank or payment processor).

6. Third-party processors

We rely on a small number of service providers to run our services, and only share what each one needs to do its job:

• Anthropic — processes the text you submit to the AI Brief, to generate your response.
• Our form-delivery provider — relays contact form submissions to our inbox by email.
• Resend — sends the magic sign-in links used to authenticate client portal accounts.
• Supabase and our cloud infrastructure providers — host the client portal’s database (client, project, and document metadata) and application infrastructure.
• Vercel — hosts the website and the client portal application.
• Our bank or payment processor — used to transfer Growth Partner / Channel Partner rewards.

These providers process data on our behalf under their own terms and security measures, and only for the purposes described above. Where a client engagement involves additional sub-processors (for example, a project-specific database or a document e-signature tool), those are disclosed in the Data Processing Agreement for that engagement, not here.

7. Cookies and local storage

The public website does not use advertising or tracking cookies, and we do not run third-party analytics that profile you across the web. The client portal sets one essential session cookie needed to keep you signed in — this isn’t optional, because without it the portal can’t function, but it also isn’t used to track you elsewhere. If either app starts using cookies for a new purpose, we will update this policy and, where required, ask for your consent first.

8. International data transfers

Some of the providers listed in Section 6 (Anthropic, Resend, Vercel, and our cloud infrastructure providers) process data outside Nigeria, principally in the United States. Where personal data is transferred outside Nigeria, we take steps to ensure it remains protected consistent with the Nigeria Data Protection Act 2023 (NDPA) — including relying on our providers’ contractual data protection commitments — before that transfer happens.

9. Data retention

• Contact enquiries are kept for as long as needed to respond and maintain a record of our correspondence, then deleted or archived in line with our internal retention practices.
• AI Brief inputs are processed on demand to generate your response and are not retained to build a profile of you.
• Referral program records are kept for as long as needed to track a referral through to payment, plus our standard accounting and tax retention period afterward.
• Client portal and engagement data is kept for the duration of the engagement, and in any case no longer than 2 years after engagement completion (plus a 30-day grace period), consistent with our Data Processing Agreement, unless we’re required to keep something for longer by law or a client requests earlier deletion.
• Technical data used for abuse protection and authentication is short-lived.

10. Your rights

If you are in Nigeria, the Nigeria Data Protection Act 2023 (NDPA) gives you rights over your personal data, including the right to access it, to request correction or deletion, to object to or restrict certain processing, to data portability, and to withdraw consent where processing relies on it. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC). Where other data protection laws apply to you, you may have equivalent rights. To exercise any of these rights, contact us at info@pegbitstudio.com. For client portal accounts, you can also ask us to close your account and remove your access at any time.

11. Children’s privacy

Our services are directed at businesses and professionals, not children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Security

We take reasonable technical and organisational measures to protect personal information, including encrypting data at rest and in transit, restricting access on a least-privilege basis, and scoping client portal data so a client account can only ever reach its own organisation’s records. No method of transmission or storage is completely secure, but we work to minimise what we collect and to isolate it appropriately.

13. Changes to this policy

We may update this policy from time to time as our services change. We’ll update the “Last updated” date above when we do, and for material changes we’ll take reasonable steps to let active clients and portal users know.

14. Contact us

Questions about this policy can be sent to info@pegbitstudio.com or by post to our registered office.

PegBit Technologies Ltd
Registered office: Lagos, Nigeria
Company registration number: RC 9513533