Privacy Policy
Last updated: 27 July 2026
UnifiedLayer ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, how long we keep it, and what rights you have.
1. What We Collect
- Account information — email address, username, full name, and hashed password.
- Organisation data — organisation name, billing email, and subscription details.
- Usage data — pipeline configurations, run history, data source and destination metadata, API request logs, and login timestamps.
- Technical data — IP address, browser type, and device information collected automatically via server logs.
- Billing data — billing email and subscription plan. Payments may be processed by Paystack (for customers billed in NGN, KES, or GHS) or Stripe (for customers billed in GBP or EUR). Full payment card details are never stored on our servers.
2. How We Use It
- To provide, operate, and maintain the data integration platform.
- To authenticate users and manage accounts.
- To orchestrate, schedule, and monitor data pipelines.
- To process billing and manage subscriptions.
- To ensure platform security, prevent abuse, and maintain audit trails.
- To improve the service using aggregated, non-personal analytics.
3. Data Retention
| Data type | Retention period |
|---|---|
| Account data | Retained while your account is active; anonymised upon deletion. |
| Pipeline run logs | 90 days after execution. |
| Audit logs | 12 months. |
| Billing records | 7 years (financial regulations). |
| Server logs | 30 days. |
4. Your Rights
Under the General Data Protection Regulation (GDPR), Protection of Personal Information Act (POPIA), and the Nigeria Data Protection Act 2023 (together with directives and regulations issued by the Nigeria Data Protection Commission), you have the following rights:
- Access — request a copy of your personal data.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your personal data (right to be forgotten).
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — where processing is based on consent, you may withdraw it at any time.
You can exercise your access, portability, and erasure rights directly from your account settings under Privacy & Data, or by contacting us.
5. Third Parties
- Paystack and Stripe — payment processing. We share your billing email and subscription events with the processor handling your currency.
- Cloud infrastructure provider — all platform data is stored on encrypted infrastructure within the provider's data centres.
6. Contact
For any privacy-related questions or to exercise your rights, please contact our Data Protection Officer:
- Email: privacy@unifiedlayer.io