Privacy Policy

Last updated: 3 November 2026

1. Who we are

This policy explains how humanindloop ("humanindloop", "we", "us" or "our"), based in Nigeria, collects and uses your personal data when you use Columbịa. We are the data controller for that data under the Nigeria Data Protection Act 2023 (the "NDPA"). You can reach us at humanintheloop26@gmail.com.

2. The personal data we collect

We collect only what we need to run Columbịa:

• Account details: your email address, your password (stored only as a salted hash, never in readable form), your country, and the time you gave your consent.
• Preferences: the field or profession you choose (including any text you type under "Others"), your delivery hour and time zone, and the dates of your delivery-time changes.
• Subscription and payment status: your trial dates, the dates your payments cover, and the reference and result of each Paystack payment. We do not collect or store your card or bank details. Paystack handles these.
• Email activity: a record of which emails we sent you and when, so that we do not send duplicates or miss a day.
• Messages you send us: feedback you submit through your account, waitlist requests (your email address and the agent you ask for), and anything you write to us directly.
• Technical data: a login cookie (see section 7), and standard server logs kept by our hosting provider, which can include your IP address and browser details.

We collect this data from you directly, and from Paystack when it confirms a payment.

3. Why we use your data, and our lawful basis

• To provide Columbịa: to create your account, send your emails, take payment and let you log in. Our basis is performance of our contract with you, and your consent.
• To send you Columbịa emails: your consent, which you give when you sign up and can withdraw at any time.
• To keep Columbịa secure and prevent misuse: our legitimate interest in protecting the service and our users.
• To answer you and improve Columbịa: our legitimate interest in supporting subscribers and improving the service, using the feedback you give us.
• To meet legal obligations: for example, tax and accounting records for payments.

We use your data only for these purposes. We do not sell your personal data, and we do not use it to send you marketing for other companies.

4. Who we share your data with

We share personal data only with service providers that help us run Columbịa, and only as needed for that purpose:

• Paystack, which processes your payments.
• Resend, which delivers our emails to you.
• Render, which hosts Columbịa and stores its database.
• An AI service provider, which receives the text you type under "Others" so that we can match your field to the right category. We do not send it your email address.

These providers act on our instructions and are bound to protect your data. We may also disclose data where the law requires it, to a court, regulator or law-enforcement authority, or to protect our legal rights. If our business is sold or restructured, your data may pass to the new owner, who will be bound by this policy.

5. Transfers outside Nigeria

Columbịa's database is hosted by Render in Frankfurt, Germany, so your data is stored outside Nigeria. Some of our other providers, such as our email and payment providers, may also process data in other countries. Where data leaves Nigeria, we take steps to make sure it stays protected to the standard the NDPA requires, including by using providers that are bound by contract to protect it.

6. How long we keep your data

We keep your data only for as long as we need it for the purposes above, and for as long as the law requires. We keep records of payments for six years after the payment, to meet our tax and accounting obligations. We keep your account data for 12 months after you cancel, or after your trial ends without you subscribing, so that you can return easily. After that we delete it or make it anonymous, unless the law requires us to keep it. You can ask us to delete it sooner at any time. When other data is no longer needed, we delete it or make it anonymous. Password reset links expire after 60 minutes and can be used once.

7. Cookies

Columbịa uses one cookie, which keeps you logged in. It is strictly necessary for your account to work, so it does not need separate consent. It lasts up to 30 days if you choose "Remember me", and you can end it sooner by logging out, including on all devices from your account page. We do not use advertising or tracking cookies.

8. How we protect your data

We store passwords as salted hashes and password-reset and login tokens only in hashed form. Connections to Columbịa are encrypted with HTTPS, and access to our systems is limited to those who need it. No system is completely secure, so if a breach occurs that is likely to put your rights at risk, we will notify you and the Nigeria Data Protection Commission as the NDPA requires.

9. Your rights

Under the NDPA you have the right to:

• be told how your data is used, and ask for a copy of the data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data, or to restrict how we use it;
• object to processing that relies on our legitimate interest;
• receive your data in a commonly used format, or ask us to send it to another provider where this is possible;
• withdraw your consent at any time, without affecting what we did before you withdrew it.

You can stop all emails at once by cancelling from your account page, or with the unsubscribe link in any email. For any other request, write to us at the address in section 1 and we will respond within a reasonable time, and in any case within the period the law sets. We may need to confirm your identity first. If you are not satisfied with our response, you have the right to complain to the Nigeria Data Protection Commission.

10. Children

Columbịa is designed for working professionals and is not directed at children. We do not knowingly collect data from children. If you think a child has given us data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new "last updated" date and, where a change is significant, tell you by email. Please read it together with our Terms of Service.