Privacy policy

Hutstack Technologies Limited (“Hutstack”, “we”, “us”) is a company registered in Nigeria with its office at 8a Oje Imianvan Street, Oregun, Lagos, Nigeria. We build and operate WorkOS, a business management platform.

For data you submit through this website, we are the data controller. For data your company stores inside WorkOS, your company is the controller and we act as a data processor on your instructions under our customer agreement.

• Enquiry details. Your name, work email, phone number, company name and team size when you request a demo or contact us.
• Account data. The name, email and role of each user your administrator creates in WorkOS.
• Customer content. Whatever your company puts into the platform — employee records, projects, invoices, messages and files. We hold this on your behalf.
• Technical data. IP address, browser type and pages visited, collected in server logs for security and diagnostics.

• To respond to your enquiry and provide a demo or quotation.
• To deliver, secure, support and improve the WorkOS service.
• To send transactional messages such as approvals, alerts and account notices.
• To meet legal, tax and regulatory obligations in Nigeria.

We rely on your consent for enquiry forms, on performance of a contract for service delivery, and on legitimate interests for security and service improvement. We do not sell personal data and we do not use customer content to train machine-learning models.

We share personal data only with service providers who help us run the platform — cloud hosting and storage, email delivery, and payment processing for disbursements — each bound by contract to protect it. We also disclose data where we are legally required to.

Some of our infrastructure providers operate outside Nigeria. Where personal data is transferred abroad we use providers offering an adequate level of protection and appropriate contractual safeguards. Customers who require data to remain on specific infrastructure can deploy WorkOS on their own servers under the Enterprise plan.

Enquiry data is retained for up to 24 months from your last contact with us. Customer content is retained for the life of your subscription and deleted within 90 days of termination unless you ask us to remove it sooner or the law requires us to keep it longer.

Data is encrypted in transit. Access to production systems is restricted, logged and limited to staff who need it. The platform enforces role-based access control, supports two-factor authentication, and records an audit trail of changes. See our security page for detail.

Under the Nigeria Data Protection Act 2023 you may request access to your personal data, ask us to correct or delete it, object to or restrict certain processing, withdraw consent, and request a portable copy. If your data sits inside a customer’s WorkOS workspace, contact that company first — we will refer your request to them and support them in answering it.

To exercise a right, email [email protected]. We respond within 30 days. You may also complain to the Nigeria Data Protection Commission.

This website uses only the cookies necessary to serve pages and keep the site secure. We do not run advertising trackers or third-party analytics profiling. If that changes we will update this policy and ask for consent before setting any non-essential cookie.

We will post any change to this policy on this page and update the date above. Questions go to [email protected] or +234 906 000 6378, or write to us at 8a Oje Imianvan Street, Oregun, Lagos, Nigeria.