Privacy Policy

Industry Ecosystem Brain (“IndusBrain”, “we”) processes personal data in line with the Nigeria Data Protection Act 2023 (NDPA/NDPR) and, where applicable, the EU General Data Protection Regulation (GDPR).

What we collect

• Account data: email address and a securely hashed password.
• Quote requests: name, email, company, and your project description, used to prepare and send your quote and invoice.
• Usage data: blueprint requests are logged with the request text, matched industry, generation source, IP address and timestamp, for security auditing and abuse prevention.

How we use it

• To generate and deliver your blueprints and manage your credits.
• To respond to quote requests and issue invoices (manual bank transfer).
• To secure the service (rate limiting, audit logging).

Requests for industries outside our curated database are processed by OpenAI to generate the blueprint. Only the project request text is shared — never your name, email or payment details.

Your rights

You may request access to, correction of, or deletion of your personal data at any time. Contact us and we will act on your request within 30 days. We do not sell personal data.

Retention & security

Data is retained only as long as needed for the purposes above. Passwords are stored using salted scrypt hashing; sessions expire automatically; admin functions are access-controlled and all blueprint activity is auditable.