Privacy and cookies
Effective 16 October 2026 · Last updated 16 October 2026
Profitna is accounting and business-finance software for Nigerian businesses, churches and non-profits. This page explains what we collect, why we are allowed to, who else sees it, and what you can tell us to do about it. It is written to be read, not to be survived.
The short version
- Your books are yours. We do not sell them, and we do not use them to advertise to you.
- We collect what the software needs to work, plus what the law requires us to keep.
- Advertising cookies are off until you turn them on, and you can turn them off again on this page.
- You can ask for a copy of your data, or for it to be corrected or deleted.
1. Who we are
Profitna is operated by Mideops Professional Services Ltd, a company registered in Nigeria. Where this page says we, that is who it means.
For anything about your data — a question, a request, a complaint — write to support@profitna.com. A person reads it.
In the language of the Nigeria Data Protection Act 2023, we are the data controller for information about you as a Profitna user. For the books you keep in Profitna, the position is different and section 4 explains it.
2. What we collect
When you create an account
| What | Where it comes from |
|---|---|
| Your name and email address | You, or Google if you sign in with Google |
| Your password | You. Stored only as a bcrypt hash — we cannot read it, and neither can anyone who steals the database |
| Your organisation's name, type and state | You, at signup |
| Your role on the account | Whoever invited you |
When you use Profitna
| What | Note |
|---|---|
| Your books | Invoices, bills, customers, suppliers, products, bank lines, journals — everything you enter or import |
| An activity log | What was changed, by whom and when. An accounting system that cannot answer that is not an accounting system |
| Questions you ask Profitna AI | Section 5 explains where those go |
| Bank connection details | The institution and a masked account number. We never hold your bank login |
When you pay us
| What | Note |
|---|---|
| Card brand, last four digits and expiry | Only what the screen shows back to you |
| Payment references, amounts and outcomes | Needed for your receipts and our records |
| Your full card number and CVV | Never collected and never stored. Those go straight from your browser to the payment processor and never touch our servers |
Automatically, from your device
| What | Note |
|---|---|
| IP address and browser user-agent | In server logs, and used for session security |
| Cookies | Section 10, which also has the controls |
3. Why, and what allows us to
Under the Nigeria Data Protection Act every use of your data needs a lawful basis. Ours:
| What we do | Why we may |
|---|---|
| Run the software, keep your books, take payment | Performing our contract with you |
| Tell you your trial is ending, a payment failed, your account status changed | Performing our contract. These cannot be switched off — not telling you would be worse than the email |
| Keep the activity log, prevent fraud and abuse, keep backups | Our legitimate interest in a product that is accurate and secure |
| Help you get started with the parts you have not used | Our legitimate interest. You can switch these off at any time |
| Keep accounting and tax records | Legal obligation |
| Advertising and measurement (Meta) | Your consent, and nothing happens until you give it |
| Marketing email from us | Your consent, which is off by default and which you can withdraw in one click |
We do not sell your personal data. We do not make decisions about you by automated means that produce legal effects.
4. Data about other people that you put into Profitna
This is the part most privacy policies skip, and for an accounting product it is the important one.
When you record a customer, a supplier, a staff member or a donor, you are putting their personal data into our software. For that data you are the data controller and we are your data processor. In plain terms:
- It stays yours. We process it to run the service for you and for nothing else.
- We do not use it to advertise, to train any model, or to build a profile of anyone.
- We do not look at it except where we must to fix a fault, answer your support request, or comply with the law — and those occasions are logged.
- If one of your customers asks you to correct or delete their data, that is your request to answer. We will help you do it.
- Your own obligations still apply. You need a lawful basis for the data you enter about other people, and you must tell them how you use it. Profitna being compliant does not make you compliant.
5. Who else receives data
Only these, only for the stated purpose, and none of them may use it for their own ends except where noted.
| Who | What they get, and why |
|---|---|
| Monnify / Paystack | Your name, email and the amount, to take subscription payment and to tell us whether it worked. They are the ones who see your card; we never do. |
| Mono | If you connect a bank account, Mono brokers that connection and returns transactions. Their own privacy terms apply to the bank-side consent you give them. |
| Anthropic | If you use Ask Profitna, your question and a snapshot of the figures needed to answer it are sent to Anthropic's Claude API, which generates the answer. It is not used to train their models. Do not type anything into the question box you would not want sent — and if you would rather none of it went, simply do not use that feature. |
| Hostinger | Hosts our servers and sends our email, so they handle the data in transit and at rest. |
| Only if you choose to sign in with Google, and only to confirm who you are. | |
| Meta (Facebook, Instagram) | Only with your consent. If you accept advertising cookies, Meta receives your IP address, your browser user-agent, Meta's own cookie identifiers, and your email, name and user id each hashed with SHA-256 so they leave as scrambled values rather than readable text. Meta never receives anything from your books. See section 10 to turn this off. |
| Backup storage | Database backups, so that a lost server is not a lost business. They are currently held on the same United Kingdom infrastructure as the live service. If we ever move them to a separate storage provider we will name it here before we do. |
| Courts, regulators and law enforcement | Where we are legally required to. We tell you unless we are forbidden from telling you. |
6. Where it is kept, and transfers outside Nigeria
Your data is stored in the United Kingdom. Profitna runs on servers provided by Hostinger International Ltd in a United Kingdom data centre, and our backups are held there too. Several of the services listed in section 5 — the payment processors, Anthropic, Meta, Google — also process data outside Nigeria.
We say so plainly because you are entitled to know where your books physically sit.
The Nigeria Data Protection Act allows data to leave Nigeria where the destination gives an adequate level of protection, or where appropriate contractual safeguards are in place. The United Kingdom has its own comprehensive data protection law and an independent regulator. For the other services we rely on the data-processing terms in our contracts with each of them. If you want to know which applies to a particular provider, ask us and we will tell you.
7. How long we keep it
| What | How long |
|---|---|
| Your account and your books | While your account is open, and for as long afterwards as tax and company law require us to keep accounting records |
| Backups | Rolling 14 days, then deleted. A deletion request is honoured in the live database immediately and works its way out of backups within that window |
| Activity and audit logs | Kept, because their value is that they are complete |
| Email we sent you | Kept, so that "I never received that" has an answer |
| Addresses that bounced or reported us as spam | Kept indefinitely, precisely so that we never write to them again |
| Advertising identifiers | Per Meta's own retention, which we do not control |
8. Your rights
Under the Nigeria Data Protection Act 2023 you may ask us to:
- Show you what we hold about you, and give you a copy.
- Correct anything that is wrong.
- Delete your data, where we are not required to keep it.
- Stop or limit a particular use.
- Object to anything we do on the basis of legitimate interest.
- Hand it over in a portable format — and you do not need to ask us for your books, which you can export from Profitna yourself at any time.
- Withdraw consent you have given, for advertising cookies or marketing email. Withdrawing it does not undo what was lawful beforehand.
Write to support@profitna.com. We will answer within 30 days, and we will not charge you for it. We may need to confirm who you are first, which is a protection for you rather than an obstacle.
9. How it is protected
- Everything travels over HTTPS.
- Passwords are stored as bcrypt hashes, never as text that can be read back.
- Each organisation's data is separated, and every request is checked against the organisation it claims to belong to.
- Any payment credentials a business stores are encrypted with AES-256-GCM, bound to that organisation so that a value copied between accounts simply fails to decrypt.
- Administrative access needs a second factor.
- Backups are taken on a schedule and verified by being read back, not merely written.
No system is perfect. If we discover a breach that is likely to harm you, we will tell you and the Nigeria Data Protection Commission, as the Act requires.
10. Cookies, and your choice
A cookie is a small file a website leaves in your browser. Profitna uses as few as it can.
Necessary — always on
These make the site work. There is no way to use Profitna without them, so they are not offered as a choice.
| Cookie | What it does | How long |
|---|---|---|
profitna_session | Keeps you signed in. Not readable by any script in the page | 7 days |
profitna_admin | The same, for our own staff console. You will never have one | Short-lived |
profitna_ads | Remembers the choice you make below, so we do not ask again | 6 months |
Advertising and measurement — off unless you say otherwise
If you accept, Meta's pixel loads and sets the cookies below, and we also report the same events to Meta from our server. If you decline or ignore the banner, the pixel is never loaded, those cookies are never set, and our server sends Meta nothing about you.
| Cookie | What it does | How long |
|---|---|---|
_fbp | Meta's identifier for this browser, used to measure whether an advert led to a signup | About 3 months |
_fbc | Records which advert you arrived from, when you arrive from one | About 3 months |
Your choice
Turning them off also clears Meta's cookies from this browser where we are able to. Your browser's own settings can block all of them regardless of what you choose here.
11. Email we send you
Three kinds, and we keep them apart deliberately:
- About your account — your trial ending, a payment failing. Sent because you hold an account with us. These cannot be switched off; closing the account stops them.
- Help getting started — short notes about the parts of Profitna you have not reached. One click stops them, and they stop on their own once you are up and running.
- News and offers — marketing. Off unless you deliberately turn it on, and we record when and from where you did.
Every optional email carries a one-click unsubscribe link, and a link to a page where you can choose between the categories rather than only all-or-nothing.
12. Children
Profitna is for businesses and organisations and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe we have, tell us and we will delete it.
13. Changes to this page
When we change something that matters we will update the date at the top and, if the change affects you materially, tell you in the product or by email. We will not quietly broaden what we do with data you have already given us.
14. Complaints
Tell us first — support@profitna.com — because most things are a misunderstanding we can fix the same day.
If we do not put it right, you may complain to the Nigeria Data Protection Commission, the regulator established under the Nigeria Data Protection Act 2023. Complaining to them costs you nothing and does not affect your account with us.