1. Information We Collect
We collect information you provide when creating an account (name, email, company details), information generated through using ElorPra (employees, payroll records, invoices, financial data), and technical information (IP address, browser type, device) for security and analytics purposes.
We do not collect any information beyond what is necessary to provide the ElorPra service.
2. How We Use Your Information
Your data is used exclusively to provide and improve the ElorPra service. Specifically:
• To operate your ElorPra account and provide access to all platform features
• To process payroll, generate invoices and run financial calculations
• To send transactional emails (invoices, payslips, notifications)
• To provide customer support
• To improve the platform based on usage patterns (using anonymised data only)
• To comply with legal obligations
We never use your data for advertising or sell it to third parties.
3. Data Isolation & Security
Every ElorPra business has completely isolated data. Your employee records, financial data, invoices and CRM data are never visible to or accessible by other ElorPra users.
We use industry-standard encryption (TLS in transit, AES-256 at rest), bcrypt password hashing, JWT authentication with token rotation, and maintain detailed audit logs of all data access.
Our infrastructure runs on Railway (API) and Vercel (web), both of which maintain SOC 2 compliance.
4. Data Sharing
We do not sell your data. Period.
We share data with third parties only where strictly necessary:
• Paystack: to process invoice payments made by your customers
• Resend: to deliver transactional emails
• Railway / Vercel: our cloud infrastructure providers
All third-party providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing their service to us.
5. Data Retention
We retain your data for as long as your account is active plus 90 days after account closure, to allow for recovery in case of accidental deletion.
If you request account deletion, all your data is permanently deleted within 30 days. Some anonymised aggregate data (not personally identifiable) may be retained for platform analytics.
6. Your Rights
You have the right to:
• Access all data we hold about you and your business
• Correct any inaccurate data
• Request deletion of your data
• Export your data in a portable format (CSV/PDF)
• Restrict processing of your data
To exercise any of these rights, email
[email protected] with your request. We will respond within 10 business days.
7. Cookies
ElorPra uses strictly necessary cookies only:
• Session authentication cookie: keeps you logged in
• Region cookie: remembers your location for the correct landing page
We do not use tracking cookies, advertising cookies or third-party analytics cookies.
8. International Transfers
ElorPra is operated by ELOR-TECH LTD, a Nigerian company. Our servers are located in data centres that may be outside Nigeria. By using ElorPra, you consent to the transfer of your data to these servers, which are protected by the same security measures described in this policy.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you by email and with a notice in your dashboard at least 14 days before any material change takes effect. Continued use of ElorPra after that date constitutes acceptance of the updated policy.
10. Contact
For any privacy-related questions, data requests or concerns, contact us at:
ELOR-TECH LTD
Email:
[email protected]
Abuja, Nigeria