Privacy Policy

CenDesk is a helpdesk service operated by Zeemax Digital (“CenDesk”, “we”, “us”). We run customer support for companies: their customers contact them by email, WhatsApp, phone or a web form, and our team handles those requests. This policy explains what personal data we handle and why.

1. Who this policy covers

• Companies and their staff who sign up for CenDesk or are added by us.
• Our own team members who work cases on a company's behalf.
• People who contact a company that uses CenDesk (for example by sending an email, WhatsApp message, voicemail or web-form request).

2. What we collect

Account information. Name, email address, company name, the plan you choose, and a password (stored only as a one-way hash, never in readable form). If you sign in with Google, we receive your name, email address and Google account ID; we do not receive your Google password.

Billing information. Payments are made by bank transfer. We keep the amount, reference, date and status of each payment, and the proof of payment you upload (an image or PDF).

Business details you give us. Contact people at your company (name, role, email, phone) and the WhatsApp and phone numbers you ask us to connect.

Support conversations. When someone contacts a company through CenDesk we store the content of the conversation, together with the sender's name and email address, or their WhatsApp number or caller phone number. For phone calls this includes the time and length of the call and any voicemail recording. Attachments sent by email or WhatsApp are not stored; we record only that one was received.

Technical data. IP address and similar technical details used for security (such as limiting repeated sign-in attempts), and the cookies described below.

3. How we use it

• To provide the helpdesk: receive requests, route them to the right team member, reply, and show companies their case history and statistics.
• To create and secure accounts, confirm email addresses and reset passwords.
• To confirm payments and keep the records we need for accounting.
• To keep the service safe, prevent abuse and fix problems.
• To contact you about your account or the service. We do not sell personal data and we do not use support conversations for advertising.

4. Who we share it with

We use trusted providers to run the service. They handle data only to provide their part of it:

• Web hosting and email mailboxes: Namecheap.
• Email delivery and receiving support email: Postmark.
• WhatsApp messages: Meta Platforms (WhatsApp Business Platform).
• Phone calls and voicemail: Twilio.
• Sign-in with Google and web fonts: Google.

We may also disclose data where the law requires it, or to protect the rights and safety of our users or the public. If our business is ever sold or reorganised, personal data may transfer to the new owner under the same protections.

5. Our role for your customers' data

The company you contact is responsible for deciding why and how the details of its own customers are used. When we handle those conversations for a company we act on that company's instructions. If you contacted a company through CenDesk and want to see or delete your details, you can ask the company or ask us (see “Your choices” below), and we will pass your request on or act on it.

6. Cookies and similar technologies

We use only essential cookies: a session cookie to keep you signed in and protect forms from forgery, which is removed when you sign out or close the session. We also store your light or dark theme choice in your browser. We do not use advertising or tracking cookies.

7. Security

The site is served over HTTPS. Passwords are hashed, access to cases is limited by role so team members only see the companies assigned to them, uploaded payment proofs are kept outside the public website and shown only to the account owner and administrators, and repeated sign-in attempts are rate limited. No system is perfectly secure, so please use a strong, unique password and tell us promptly if you suspect misuse.

8. How long we keep data

We keep data while your account is active and for as long as we need it to provide the service, meet legal and accounting obligations, resolve disputes and enforce our agreements. When you ask us to delete your data we delete or anonymise it, except records we are legally required to keep, such as payment records.

9. International transfers

Some of our providers store or process data outside Nigeria. Where that happens we rely on those providers' own data-protection commitments.

10. Your choices and rights

Subject to applicable law, including the Nigeria Data Protection Act 2023 where it applies, you can ask us to give you a copy of your personal data, correct it, delete it, or restrict how we use it, and you can object to certain uses. To delete your data, see our data deletion instructions. You can also contact us at support@cendesk.org. If you are unhappy with our response, you may complain to the data protection authority in your country.

11. Children

CenDesk is for businesses and is not directed at people under 18. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy as the service changes. We will change the “Last updated” date above and, for significant changes, tell account holders.

13. Contact

Questions about this policy or your data: support@cendesk.org.