Privacy Policy
Last updated Nov 4, 2026 · Version 1
This Privacy Policy explains how PFC Tek ("we", "us") collects, uses and protects personal information when you use pfcloud (the "Service") and our website. It is written to meet the Nigeria Data Protection Act 2023 (NDPA) and, where they apply, the EU/UK General Data Protection Regulation (GDPR).
1. Who is responsible
PFC Tek is the controller of the account information described below. For personal data inside the applications you deploy to your own servers, you are the controller and we act only as your processor; see our Data Processing Agreement.
2. Information we collect
Account information: your name, email address, password (stored only as a secure hash), two-factor and passkey settings, team memberships and roles.
Billing information: your plan, payment status and payment references. Card payments are taken by our payment partner; we never see or store full card numbers. We keep only a card identifier and a display label (for example the last four digits) when you choose automatic renewal.
Server and site information: server addresses, host keys, site domains, repository names, deploy history, run logs, settings and encrypted backups you choose to keep with us. Environment files you edit are sent to your server and are not stored by us, except inside encrypted backups.
Security and usage information: IP address, browser and device type, sign-in times, failed sign-ins and an audit log of changes made in your team. We use these to protect accounts, investigate problems and meet legal obligations.
Support information: messages you send us and problem reports.
Cookies: see our Cookie Policy.
3. Why we use it
| Purpose | Legal basis |
|---|---|
| Provide the Service, run deploys and backups you ask for | Performance of our contract with you |
| Take payments and keep billing records | Contract; legal obligation |
| Keep accounts and servers secure, prevent abuse and fraud | Legitimate interests; legal obligation |
| Send service emails (alerts, receipts, security notices) | Contract; legitimate interests |
| Send product news | Legitimate interests or consent; you can opt out at any time |
| Improve the Service using aggregated statistics | Legitimate interests |
We do not sell your personal information and we do not use it for advertising.
4. Who we share it with
We share personal information only with service providers who help us run the Service, under contracts that require them to protect it, such as hosting and storage providers, email delivery, our payment partner and, when you connect them, the cloud, DNS, Git and chat providers you choose. We also share information when the law requires it, to protect rights and safety, or as part of a merger or sale of our business (with notice to you).
Our internal reporting service receives only anonymous identifiers, plan and status information, and never names, full email addresses, domains or IP addresses.
5. International transfers
Our providers may process data outside Nigeria. Where they do, we use safeguards the law recognises, such as contractual clauses and providers with adequate protection.
6. How long we keep it
- Account information: while your account exists, then deleted within 30 days of closing it, except what we must keep by law.
- Billing records: as long as tax and accounting law requires (usually 6 years).
- Run logs and metrics: for limited periods (for example metrics for 7 days, API request logs for 30 days).
- Deleted servers and sites: hidden at once and permanently removed after 30 days, so support can restore mistakes.
- Audit log: kept permanently and tamper-evident, because it is a security record; it never contains passwords or environment file contents.
7. Security
We encrypt secrets and backups at rest, use encrypted connections, pin server host keys, limit staff access, require two-factor authentication for staff, and record a tamper-evident audit log. See our Security Policy.
8. Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal information, object to or restrict some uses, and withdraw consent. You can download an export of your account data and delete your account from your account settings. For anything else write to myforge@steadyridedrivingschool.com. You can also complain to the Nigeria Data Protection Commission or your local data protection authority.
9. Children
The Service is not intended for anyone under 18 and we do not knowingly collect their information.
10. Changes
We will post any changes here with a new "last updated" date and email account owners about significant changes.
11. Contact
Privacy questions or requests: myforge@steadyridedrivingschool.com.