Introduction
This Privacy Policy describes how Descasio Technology ("Descasio," "we," "us," or "our") collects, uses, and handles your information when you access or use PlugIQ (the "Platform"). By using the Platform, you consent to the practices described in this Policy.
We reserve the right to update this Policy at any time. Material changes will be communicated by email. Your continued use of the Platform after an update constitutes acceptance of the revised Policy.
1. Information We Collect
1.1 Account Information
When you register for PlugIQ, we collect your name, work email address, job title, company name, and phone number. If you register via OAuth (Google, Microsoft), we receive your basic profile information from that provider. We do not receive or store your OAuth provider password.
1.2 Usage Data
We collect data about how you interact with the Platform, including features accessed, workflows created, actions taken, device type, IP address, browser type, and session data.
1.3 Workflow and Process Data
When you use PlugIQ to build and run approval workflows, the Platform stores the data you and your team submit — including form submissions, approval decisions, comments, and attachments.
1.4 Payment Information
Payment information is handled securely through our payment processors. We do not store your full credit card details on our servers.
2. How We Use Your Information
We use your information to provide, maintain, and improve the Platform; authenticate your identity; process transactions; send service notifications; respond to enquiries; monitor for security threats; and comply with legal obligations.
3. Google User Data
PlugIQ integrates with Google Workspace to support specific platform features. Our use of Google user data is strictly limited as follows:
- ‣Google Sign-In: Used for authentication only. We do not access your Google account beyond verifying your identity.
- ‣Google Drive: Used only to access files you explicitly select or attach within a workflow. We do not scan or index your Drive.
- ‣Gmail: Used only to send platform notifications on your behalf. We do not read, scan, or store the contents of your email.
4. Microsoft 365 Data
PlugIQ integrates with Microsoft 365 under the same principles as our Google integration. Microsoft Sign-In is used for authentication only. Outlook is used only to send platform notifications. OneDrive access is scoped to files you explicitly attach within a workflow.
Microsoft 365 data is not used for advertising, profiling, or any purpose beyond operating the features you have configured.
5. Data Sharing
We do not sell your personal data. We share your information only with service providers who are contractually obligated to protect your data; legal authorities when required by Nigerian law; and business successors in the event of a merger or acquisition (with prior notice to you).
6. Data Storage and Security
PlugIQ is hosted on Amazon Web Services (AWS). We implement the following security measures: all data in transit is encrypted using TLS 1.2 or higher; all data at rest is encrypted using AES-256; access is governed by Role-Based Access Controls; an immutable audit log records all platform actions; and multi-factor authentication is required for administrative access.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide the Platform. To request deletion of your data, contact us at team@plugiq.io.
8. Your Rights (Nigeria Data Protection Act 2023)
Under the Nigeria Data Protection Act 2023, you have the right to access, rectify, erase, restrict, port, or object to the processing of your personal data, withdraw consent, and lodge a complaint with the Nigeria Data Protection Commission (NDPC). Contact team@plugiq.io to exercise these rights. We will respond within 30 days.
9. Cookies
PlugIQ uses cookies for authentication, session state, and platform usage analytics. You can manage or disable cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality.
10. International Data Transfers
PlugIQ is operated from Nigeria. Our cloud infrastructure (AWS) may process and store data in other jurisdictions. By using the Platform, you consent to the transfer of your information to these facilities, subject to applicable data protection law.
11. Children
PlugIQ is an enterprise platform designed exclusively for use by adults aged 18 and older in a professional capacity. We do not knowingly collect personal data from individuals under the age of 18.
12. Contact
For questions about this Privacy Policy or your personal data: