Privacy Policy

01. Commitment to Privacy

KalmiTech Technologies ("KalmiTech", "we", "us") values your privacy. We strictly believe in minimal data footprint architectures: collecting only what is strictly required to provide secure, performant software platforms. We do not sell, rent, or monetize your personal data to data brokers or advertising networks.

02. Information We Collect

Depending on which KalmiTech service you interact with, we may process:

• Account Credentials: Username, email address, password hashes (salted using PBKDF2/Argon2) when you register for platforms like EduSphere or UnibenLife.
• Operational Telemetry: Standard HTTP server logs (IP address, user agent, requested paths, timestamps) for error tracking, rate limiting, and security defense.
• Transaction Records: Billing references, payment gateway identifiers (e.g., Paystack transaction tokens). Note that full credit card numbers are processed directly by PCI-DSS certified gateways and never touch our servers.
• User-Generated Content: Academic records, announcements, messages, or files uploaded within designated tenant applications.

03. How We Use Your Data

Data collected is used exclusively for legitimate operational purposes:

• Authenticating users and isolating multi-tenant organizational data.
• Maintaining server performance, debugging software exceptions, and preventing abuse.
• Delivering system notices, transactional receipts, or password reset emails.
• Complying with statutory accounting and legal requirements.

04. Data Security Standards

We employ strict security practices across our fleet:

• End-to-end TLS/HTTPS encryption with automated HSTS and modern cipher suites via Caddy.
• Isolated Docker container networks preventing cross-service data leakage.
• Least-privilege database user access and encrypted secrets storage.
• No sensitive API keys, database credentials, or private secrets exposed to client browsers.

05. Data Retention & User Rights

You retain the right to request access to, correction of, or deletion of your personal account data stored in our systems. In multi-tenant environments (e.g. school records on EduSphere), deletion requests may be subject to the retention policies of the subscribing institution.