Privacy Policy

1. Introduction & Overview

SmartBridge Apex Solutions Ltd ("SmartBridge", "we", "our", or "us") is committed to protecting the privacy and personal data of our users, clients, and partner institutions. This policy applies to our company website (workwithsmartbridge.com) and our SaaS platforms including SmartBridgeEdu, EMIS, and Proptech (SmartHouseRent).

We adhere strictly to the Nigeria Data Protection Act (NDPA), the Nigeria Data Protection Regulation (NDPR), and universally accepted global privacy frameworks including General Data Protection Regulation (GDPR) standards.

2. Information We Collect

Depending on how you interact with our services, we may collect the following categories of data:

• Institutional & Account Information: Name, institutional role, organization name, official email address, phone number, and account credentials.
• Academic & Student Data (SmartBridgeEdu & EMIS): Student enrollment records, attendance logs, academic assessments, grades, and parent/guardian contact details provided by subscribed educational institutions acting as Data Controllers.
• Property & Tenancy Data (Proptech): Tenancy agreements, rent payment records, service charge schedules, visitor gate logs, and maintenance work orders.
• Payment & Billing Data: Transaction references, invoicing history, and payment gateway confirmation tokens. We do not store sensitive debit/credit card numbers directly; all payment card processing is handled by PCI-DSS certified payment processors (e.g., Paystack).
• Technical & Usage Information: IP addresses, browser types, device identifiers, session timestamps, and platform performance logs.

3. How We Use Your Information

We process your information strictly for legitimate business and contractual purposes:

• Delivering, operating, and maintaining our institutional SaaS management tools.
• Facilitating automated fee collections, rent schedules, and electronic receipting.
• Generating academic performance computation, transcripts, and EMIS state-wide analytics.
• Providing AI-assisted analytics, document intelligence, and automated performance insights to authorized institutional administrators.
• Providing customer support, onboarding assistance, and critical system security alerts.
• Complying with statutory reporting requirements and applicable financial regulations.

4. Legal Bases for Processing

We process personal information under the following legal bases:

• Contractual Necessity: To fulfill our agreements with schools, estates, and enterprise clients.
• Consent: Where individuals explicitly provide consent for communications or optional platform modules.
• Legal Obligations: Compliance with Nigerian accounting, taxation, and regulatory mandates.
• Legitimate Interests: Protecting the security, uptime, and fraud resistance of our infrastructure.

5. Data Security & Storage

SmartBridge implements robust technical and organizational security controls to protect personal data against unauthorized access, loss, or alteration. These measures include:

• End-to-end TLS/HTTPS encryption for data in transit and AES-256 encryption for data at rest.
• Role-based access controls (RBAC) and least-privilege administrative access policies.
• Automated daily encrypted backups and multi-region disaster recovery protocols.
• Continuous vulnerability assessments and cloud security auditing.

6. Data Sharing & Third Parties

We never sell, rent, or trade your personal data. We only share information with trusted third-party service providers under strict data processing agreements:

• Payment Gateways: Certified aggregators and banking partners to settle transactions securely.
• Cloud Infrastructure Providers: Enterprise cloud hosting partners (such as Google Cloud Platform) providing secure compute and storage facilities.
• Communications Infrastructure: SMS and email delivery gateways for automated receipting and emergency announcements.
• Law Enforcement: Only when legally compelled by a valid court order or statutory requirement in Nigeria.

7. Your Data Protection Rights

Under NDPA, NDPR, and applicable international privacy laws, you have the right to:

• Request access to your personal data held by us.
• Request rectification of inaccurate or outdated information.
• Request deletion or restriction of processing of your data, subject to statutory retention obligations.
• Withdraw consent at any time for non-essential processing.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).