Privacy notice

How Growth Stack Limited handles your personal data when you contact our support team. Last updated 6 October 2026.

Who we are

Growth Stack Limited, an Odoo partner with offices in Lagos and Abuja, is the data controller for the support service at support.growthstack.gs and help@growthstack.gs. We process personal data under the Nigeria Data Protection Act 2023. Write to help@growthstack.gs about anything in this notice.

What we hold

• Your name, work email, job title and the phone or WhatsApp number your organisation gives us.
• The organisation you work for and its support plan.
• What you send us: emails, portal messages, files and screenshots, and notes of calls and WhatsApp messages.
• Your ratings and comments when you confirm a ticket is fixed.
• When you sign in to the portal, and the one-time codes we email you to do so.

Please do not send passwords, card numbers or more personal data about others than a fix needs.

Why we use it

To deliver the support contract we have with your organisation: logging and answering your requests, keeping you updated, meeting our response times and reporting on them to your organisation. We also keep records to show what we did and when, which is our legitimate interest. We do not use your data for marketing from this service, and we do not sell it.

Who else handles it

Our staff who work on your tickets, and these service providers acting on our instructions:

• Supabase, which stores the support database and your files in Ireland (European Union).
• Vercel, which runs the support website, in Ireland (European Union).
• Resend, which sends and receives our support emails, in the United States.
• Microsoft, whose Microsoft 365 and Teams our staff use to sign in and to be alerted about urgent tickets.

Data stored outside Nigeria is protected by contracts with these providers that require security and confidentiality, as the Act requires for transfers abroad.

How long we keep it

We keep a ticket, its conversation and files for 6 years after it is closed, then delete them. Emails from addresses we could not match to a client are deleted after 6 months. Your contact details are kept while your organisation is our client, and removed on request when you leave it.

Your rights

You can ask for a copy of the personal data we hold about you, for it to be corrected, or for it to be erased, and you can object to how we use it. Write to help@growthstack.gs and we will reply within 30 days. If we erase your data, we keep the ticket counts and times for your organisation's reports, without your name or what you wrote.

If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

Keeping it safe

Access is limited to the staff who need it, staff sign in with Microsoft 365, data is encrypted in transit and at rest, and every change is recorded in an audit log. If a breach puts your data at risk, we will tell you and the Commission as the Act requires.