Privacy policy
What we collect when you use CruizeLabs, why we need it, who sees it, and how to get it changed or deleted.
Last updated
The short version
- We collect only what we need to run your account, wallet and orders.
- We never sell your data or use it for advertising.
- Login details of accounts you buy are never sent by email.
- You can ask to see, correct or delete your data at any time.
This summary is for convenience. The full text below is what applies.
Who we are
CruizeLabs runs cruizelabs.com and decides how your personal data is used, which makes us the data controller under the Nigeria Data Protection Act 2023 (NDPA).
For anything about your data, email support@cruizelabs.com or use our contact page.
What we collect
When you register
- Your email address and username.
- Your password, stored only as a secure hash. We can’t read it.
- Who referred you, if anyone.
When you fund your wallet and buy
- Deposit amounts, references and their status.
- Transfer receipts, if you choose to upload one. Receipts can show your name and bank details.
- Your orders, wallet transactions and warranty claims.
When you contact us
Your name, email, phone number if you give it, and what you tell us.
Automatically
- Your IP address when you register and when you sign in, used to prevent fraud and abuse.
- Basic device and browser details, and error reports when something breaks.
How we use it
- To provide the service: running your account, crediting deposits, delivering orders and handling warranty claims. This is needed to perform our contract with you.
- To keep CruizeLabs safe: spotting fake deposits, bots and abuse. This is our legitimate interest.
- To meet legal duties: keeping financial records and answering lawful requests from the authorities.
- To send updates you asked for: such as restock news, only with your consent. You can unsubscribe at any time.
We email you about your account, deposits and orders. These messages are part of the service, so they can’t be switched off.
Who sees it
We don’t sell your data and we don’t share it with advertisers. We use trusted providers to run the service, and they may only use your data to do that work for us:
- Supabase: database and sign-in.
- Vercel: website hosting.
- Resend: sending our emails.
- UploadThing: storing receipts you upload.
- Cloudflare Turnstile: telling people apart from bots.
- Sentry: error reports so we can fix bugs.
Our account supplier receives order details only, never your name or email. We may also share data when the law requires it, or with a new owner if CruizeLabs is sold, under this same policy.
Outside Nigeria
Some of these providers store data outside Nigeria. When they do, we rely on the safeguards the NDPA allows, such as contracts that require them to protect it to the same standard.
How long we keep it
- Account details: while your account is open, and deleted within 90 days of it closing.
- Wallet, deposit and order records: 6 years, as Nigerian tax and accounting rules require.
- Uploaded receipts: 12 months after the deposit is decided.
- IP addresses and security logs: 12 months.
- Support messages: 2 years after the conversation ends.
We may keep data longer when we’re legally required to, or while a dispute or fraud investigation is open.
Keeping it safe
- All traffic to cruizelabs.com is encrypted (HTTPS).
- Passwords are hashed, and checked against known leaked passwords when you set them.
- Wallet and order records can only be changed through checked server functions, never directly from your browser.
- Our staff tools are on a separate site and need two-factor authentication.
No system is perfectly secure. If a breach puts your data at risk, we’ll tell you and the Nigeria Data Protection Commission as the law requires.
Your rights
Under the NDPA you can ask us to:
- give you a copy of the data we hold about you;
- correct anything that’s wrong;
- delete your data, unless we must keep it by law;
- stop or limit how we use it;
- send it to you in a format you can take elsewhere;
- withdraw any consent you’ve given.
Email support@cruizelabs.com from the address on your account. We’ll reply within 30 days.
If you’re unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission (NDPC).
Children
CruizeLabs is for adults. We don’t knowingly collect data from anyone under 18, and we delete it if we find we have.
Changes
If we change this policy in a way that matters, we’ll email you or show a notice on the site first.
Questions about this policy?
Talk to a real person. We’ll explain anything here in plain words.