Privacy Policy

1. Who We Are

Syberspace ("we", "us", or "our") is an AI-as-a-Service company registered in Nigeria. We provide process automation, web scraping, data cleaning, AI bots, data analysis, and AI consultation services to businesses worldwide.

For questions about this policy, contact us at syberspace247@gmail.com or +234 815 151 9625.

2. Data We Collect

We collect only what is necessary to deliver our services:

• Contact information — name, email address, phone number provided via our website forms or chat widget.
• Business information — company name, industry, service interests, and details shared during consultations.
• Usage data — pages visited, time on site, browser type, and IP address (collected via analytics tools).
• Client project data — data you provide or we access as part of delivering contracted AI services (e.g. databases, spreadsheets, APIs).
• Communication records — emails, chat transcripts, and call notes from our interactions with you.

3. How We Use Your Data

We use your data to:

• Respond to enquiries and schedule consultations.
• Deliver, maintain, and improve contracted AI services.
• Send service-related notifications (booking confirmations, project updates).
• Send occasional marketing communications — you may opt out at any time.
• Comply with applicable laws and regulations.
• Detect and prevent fraud, abuse, or unauthorised access.

We do not sell, rent, or trade your personal data to third parties.

4. Legal Basis for Processing

We process your data under the Nigeria Data Protection Act (NDPA) 2023 and, where applicable, the EU GDPR, on the following legal bases:

• Contract — processing necessary to deliver services you have requested.
• Legitimate interests — improving our services, communicating with prospects.
• Consent — for marketing emails (you may withdraw consent at any time).
• Legal obligation — where required by law.

5. Data Sharing

We share your data only with:

• Service providers — cloud hosting (Vercel, AWS, GCP), email delivery (Gmail/SMTP), calendar services (Google Calendar), and AI model providers (OpenRouter) — solely to deliver our services.
• Legal authorities — when required by law, court order, or to protect our rights.
• Business transfers — in the event of a merger or acquisition, your data may transfer with the business (you will be notified).

All third-party service providers are bound by data processing agreements and may not use your data for their own purposes.

6. Data Security

We take security seriously:

• All data is transmitted over encrypted HTTPS connections.
• Project data is stored with access controls limited to authorised personnel.
• We sign NDAs before engaging with client data.
• We perform regular security reviews of our systems.

No method of transmission over the internet is 100% secure. If you believe your data has been compromised, contact us immediately at syberspace247@gmail.com.

7. Data Retention

We retain your data for as long as necessary to deliver our services and meet our legal obligations:

• Enquiry and contact form data — up to 2 years.
• Active client project data — for the duration of the project plus 12 months.
• Financial and billing records — 7 years (legal requirement).
• Marketing consent records — until consent is withdrawn.

After the retention period, data is securely deleted or anonymised.

8. Your Rights

Depending on your location, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your data ("right to be forgotten").
• Objection — object to processing based on legitimate interests.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — for marketing, at any time.

To exercise any of these rights, email syberspace247@gmail.com. We will respond within 30 days.

9. Cookies

Our website uses minimal cookies for essential functionality (theme preferences, session state). We do not use third-party advertising cookies.

You can control cookies through your browser settings. Disabling cookies may affect site functionality.

10. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website at least 14 days before taking effect. Continued use of our services after the effective date constitutes acceptance.

12. Contact & Complaints

For privacy concerns or to exercise your rights:

If you are unsatisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or your local data protection authority.