Overview
GadaHQ Platforms LLC ("GadaHQ", "we", "us" or "our") operates the GadaHQ platform — a cloud-based Human Resources Management System available at gadahq.com and through client subdomains (e.g. yourcompany.gadahq.com).
This Privacy Policy explains how we collect, use, store and protect information when you visit our marketing website, sign up for the platform or use our services as an end user within a client portal. Please read it carefully.
Data We Collect
We collect different types of information depending on how you interact with GadaHQ:
Information you provide directly:
- Account registration data — company name, subdomain, admin name and email address.
- Billing information — payment method details processed securely via Paystack or Stripe. We do not store card numbers on our servers.
- Contact form submissions — name, email, company and message content.
- Demo request information — name, email, company, team size and country.
HR data entered by client companies:
- Employee records — names, employment details, departments, positions, documents.
- Payroll data — salary information, bank details, tax identifiers, payslips.
- Leave records — leave requests, approvals, balances.
- Attendance records — clock-in/out times, GPS coordinates (if GPS clock-in is enabled).
- Any other data entered into installed modules by client users.
Information collected automatically:
- Log data — IP addresses, browser type, pages visited, access timestamps.
- Cookies and similar tracking technologies (see Cookies section below).
How We Use It
We use the information we collect to:
- Provision and operate client portals and HR module functionality.
- Process payments and manage billing subscriptions.
- Provide customer support and respond to enquiries.
- Send transactional communications — welcome emails, invoices, password resets.
- Monitor platform performance, diagnose issues and improve the service.
- Comply with legal obligations.
We do not use your HR data for advertising, sell it to third parties, or use it to train AI models.
Data Storage
GadaHQ is hosted on servers located in the European Union and/or West Africa, depending on the infrastructure provider selected at the time of your signup. We use reputable cloud hosting providers and apply industry-standard security controls at the infrastructure level.
All data is transmitted over HTTPS using TLS encryption. Data at rest is encrypted where supported by the underlying infrastructure.
Data Isolation
GadaHQ is architecturally designed with data isolation as a core principle. Each client company's HR data is stored in a dedicated MySQL database. No client can access another client's data. The central GadaHQ control database stores only routing information, billing records and platform configuration — it never stores employee HR data.
Sharing & Disclosure
We do not sell or rent your personal data to any third party. We may share data in the following limited circumstances:
- Payment processors: Paystack and Stripe receive billing information necessary to process payments. Both are PCI-DSS compliant.
- Email service providers: Transactional emails are sent via a third-party email delivery provider (e.g. Mailgun or SendGrid). Only the data necessary to send the email is transmitted.
- Legal requirements: We may disclose data if required by applicable law, court order or lawful government request.
- Business transfers: If GadaHQ is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
Cookies
We use cookies and similar technologies to:
- Maintain authenticated sessions within the platform.
- Remember your preferences (e.g. billing cycle toggle on the pricing page).
- Collect anonymised analytics to understand how the platform is used.
You can control cookies through your browser settings. Disabling session cookies will prevent you from logging in to the platform.
Your Rights
Depending on your jurisdiction, you may have rights including:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that inaccurate data be corrected.
- Deletion: Request deletion of your personal data, subject to legal retention obligations.
- Portability: Request your data in a portable, machine-readable format.
- Objection: Object to processing of your data for certain purposes.
To exercise any of these rights, contact us at privacy@gadahq.com.
Retention
We retain account and billing data for as long as your account is active and for a period of up to 7 years thereafter for financial record-keeping compliance.
HR data (employee records, payroll, leave etc.) is retained within your dedicated client database for the duration of your subscription. Upon cancellation, your data remains accessible for 30 days. After this period, your database is permanently deleted. You should export all required data before cancelling.
Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction. These include TLS encryption in transit, database access controls, role-based permissions within the platform, and regular security reviews.
No system is completely secure. If you become aware of a security issue, please report it responsibly to security@gadahq.com.
Children
GadaHQ is a business-to-business platform intended for use by companies and their employees. It is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify active clients by email and update the "Last updated" date at the top of this page. Continued use of GadaHQ after changes are posted constitutes acceptance of the updated policy.
Contact Us
If you have questions, concerns or requests relating to this Privacy Policy or our data practices, please contact us:
- Email: privacy@gadahq.com
- Post: GadaHQ Platforms LLC, Victoria Island, Lagos, Nigeria
We aim to respond to all privacy enquiries within 5 business days.