Privacy policy

TrailBlaze Africa Ltd ("Company," "we," "us") operates TrailBlaze CRM. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.

1. Information we collect

Account information: When you sign up, we collect your name, email address, phone number, organization name, and industry. This information is necessary to create and manage your account.

Business data you provide: This includes accounts, contacts, interactions, health scores, deals, playbook data, and any other content you input into the CRM. This is Your Data and you retain full ownership of it.

Usage data: We automatically collect data about how you use the Service, including pages visited, features used, session duration, device type, browser, IP address, and interaction patterns. This helps us improve the Service.

WhatsApp data: If you enable WhatsApp integration, we process WhatsApp messages sent and received through our platform. We store message content, delivery status, and timestamps to provide the Service. We do not access your personal WhatsApp account — only messages sent through the TrailBlaze CRM WhatsApp Business integration.

Gmail data: If you enable Gmail integration, we access your email messages through the Gmail API to sync conversations with your CRM contacts. We store email content (sender, recipient, subject, body text) to display communication history on your account and contact pages. We also use Gmail send functionality to let you compose and send emails from within the CRM. We only access emails that match contacts in your CRM database. We do not access emails unrelated to your CRM contacts. You can disconnect Gmail at any time from Settings, and all synced email data will be removed from the CRM within 30 days.

Payment information: Payment processing is handled by third-party payment providers (such as Paystack). We do not store credit card numbers or bank account details on our servers.

2. How we use your information

We use your information to: provide, maintain, and improve the Service; process transactions and send billing notifications; send service-related communications (account updates, security alerts, feature announcements); provide AI-powered features (risk detection, message suggestions) by processing your account and interaction data; provide customer support; monitor and analyse usage patterns to improve the Service; comply with legal obligations; and protect against fraud and unauthorized access.

3. AI data processing

Our AI features process your account data, interaction history, and health scores to generate risk alerts, message drafts, and recommendations. This processing occurs on secure servers. We do not use Your Data to train AI models for other customers or for any purpose other than providing the Service to you. AI-generated suggestions are never sent to your clients automatically — they always require your review and approval.

4. Data sharing

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances: with service providers who help us operate the Service (hosting, email delivery, analytics), under contractual obligations to protect your data; with payment processors to handle billing; when required by law, regulation, or legal process; to protect the rights, safety, or property of TrailBlaze Africa, our users, or the public; and with your explicit consent.

5. Data storage and security

Your data is stored on Supabase infrastructure with servers in secure data centres. We implement the following security measures: encryption in transit using TLS/SSL; encryption at rest using AES-256; Row Level Security ensuring complete data isolation between organizations; encrypted storage of sensitive credentials (API keys, tokens); rate limiting on all API endpoints; full audit trail of all data access and modifications; regular security reviews and updates; and access controls with role-based permissions.

6. Data retention

We retain your data for as long as your account is active. When you delete your account, we permanently delete all Your Data within 30 days. Some data may be retained in encrypted backups for up to 90 days, after which it is permanently destroyed. Audit logs are retained for 12 months for security purposes. Anonymized, aggregated usage statistics that cannot identify you may be retained indefinitely.

7. Your rights

You have the right to: access all personal data we hold about you; correct inaccurate personal data; export Your Data at any time in CSV or JSON format; delete your account and all associated data; restrict processing of your data in certain circumstances; object to processing of your data for specific purposes; and withdraw consent at any time where processing is based on consent. To exercise these rights, use the Settings page in your account or contact us at privacy@trailblazeafrica.com.

8. Cookies

We use essential cookies to maintain your login session and remember your preferences. We use analytics cookies (Google Analytics) to understand how the Service is used. We do not use advertising cookies or tracking cookies from third-party advertisers. You can disable non-essential cookies in your browser settings.

9. Children's privacy

The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. International data transfers

Your data may be processed in countries outside Nigeria where our service providers operate. When this occurs, we ensure appropriate safeguards are in place to protect your data in accordance with this policy and applicable data protection laws, including the Nigeria Data Protection Act 2023 (NDPA).

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 14 days before the changes take effect.

12. Contact us

For questions about this Privacy Policy or to exercise your data rights, contact our Data Protection Officer at privacy@trailblazeafrica.com or write to: TrailBlaze Africa Ltd, Lagos, Nigeria.

13. Regulatory compliance

This policy is designed to comply with the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation (NDPR), and applicable provisions of the General Data Protection Regulation (GDPR) where relevant to our users. We are committed to transparent and lawful data processing.