Privacy Policy

Last updated 22 October 2026

This policy explains what personal data DocSuite handles, why, and your rights. GeoDxT Technologies runs DocSuite. We follow the Nigeria Data Protection Act 2023 and the guidance of the Nigeria Data Protection Commission.

1. Two kinds of data

• Your account data — your name, email, password (stored only as a secure hash), office details, currency, and your plan and payment history with us. For this data, we decide how it is used.
• Data you store about your clients — names, phone numbers, emails, addresses, notes, projects, documents and payment records. Your office decides what to store and why; we only process it on your behalf to provide DocSuite, and never use it for anything else.

2. What we use account data for

• To provide the service: signing you in, showing your data, applying your plan.
• To take payment for Pro and keep records we must keep for tax and accounting.
• To send essential messages, such as password resets and important changes to the service.
• To keep DocSuite secure, for example by keeping basic server logs that include IP addresses.

We do not sell personal data, and we do not use your clients' data for marketing or advertising.

3. Payments

Pro payments are processed by Paystack. Your card or bank details go directly to Paystack and are never stored by DocSuite. We receive only the payment result, amount, method and a reference. See Paystack's own privacy policy for how they handle your data.

4. Who else processes data

We use a small number of service providers to run DocSuite: our hosting provider (servers and storage), our email provider (sending password reset and service emails), and Paystack (payments). They may only use data to provide their service to us.

5. Where data is stored

Data is stored on servers operated by our hosting provider. Uploaded documents are kept in private storage and are only available to the signed-in account that uploaded them. Where data is transferred outside Nigeria, we do so in line with the Nigeria Data Protection Act.

6. How long we keep it

• Your data is kept while your account is open.
• When you delete your account, your account, clients, projects, payments and uploaded files are deleted straight away. Copies in our backups are removed within 30 days as old backups expire.
• Records of Pro payments may be kept longer where tax or accounting law requires it.

7. Security

We use encrypted connections (HTTPS), hashed passwords, private file storage, and checks that stop one account seeing another account's data. No system is perfectly secure; if a breach affects your personal data we will tell you and the regulator as the law requires.

8. Your rights

You can access, correct, export and delete your data yourself from inside DocSuite (Profile, Export data, Delete account). You also have the right to object to or restrict processing and to complain to the Nigeria Data Protection Commission. Your clients can ask your office about the data you hold on them; we will help you respond.

9. Cookies

DocSuite only uses cookies needed to keep you signed in and to protect forms against misuse. We do not use advertising or tracking cookies.

10. Children

DocSuite is for businesses and is not meant for anyone under 18.

11. Changes and contact

We will post any changes here and tell you about significant ones. For privacy questions or requests, see Help & contact.