Privacy Policy

Last updated: 13 June 2026

1. Who we are

Spluur is a developer platform operated from Nigeria. Contact us at privacy@spluur.com for any data-related queries.

2. What we collect and why

Email address and full name

Account creation, authentication, and support communications

Password (bcrypt hash)

Authenticating password-based logins. We never store raw passwords.

GitHub OAuth token

Fetching repos and triggering deployments. Stored encrypted.

IP address and user agent

Audit logging, fraud detection, abuse prevention. Not sold or shared.

Payment information

Processed exclusively by Paystack. We receive transaction status only — never card numbers.

Build logs and deployment metadata

Debugging deployments. Retained 30 days.

Usage metrics

Showing you resource consumption and enforcing plan limits.

3. How we use your data

We use personal data solely to provide and improve Spluur, communicate service-affecting changes, process payments, investigate security incidents, and comply with legal obligations. We do not sell personal data. We do not use your data for behavioural advertising.

4. Data sharing

We share data only with sub-processors required to deliver the service: Hetzner (compute), Neon (databases), Upstash (Redis), Resend (email), and Paystack (payments). Each sub-processor is subject to data processing agreements. We may disclose data to law enforcement when required by valid legal process.

5. Data retention

Account data is retained while your account is active and for 30 days after deletion. Build logs are deleted after 30 days. Audit logs are retained for 90 days. Payment records are retained for 7 years as required by Nigerian tax law.

6. Your rights

You have the right to access, correct, delete, and export your personal data, and to object to processing. Email privacy@spluur.com. We will respond within 30 days.

7. Security

See our Security page for a detailed breakdown of our security practices.

8. Cookies

We use a single session cookie to authenticate you. No third-party tracking cookies or advertising analytics scripts.

9. Contact