Privacy Policy

1. Who We Are

SuloBase is a product of Sulocorp Technologies Limited (trading as SuloTech), a company incorporated in Zambia. We operate a Backend-as-a-Service (BaaS) platform that allows developers and businesses to build applications using cloud infrastructure hosted within Zambia.

Data Controller: Sulocorp Technologies Limited
Address: Lusaka, Zambia
Contact: tech@sulocorp.com

2. Data We Collect

Account & Identity Data

• Name and email address when you sign up
• Company name (optional)
• Billing information (processed via our payment partners)
• Communication history with our support team

Usage & Technical Data

• IP address, browser type, and device information
• Pages visited, features used, and time spent on the platform
• API request logs (volume, endpoint, response codes — not content)
• Error logs and diagnostic information

Your Application Data

Data that you or your end users store in your SuloBase project databases, file storage, and authentication systems. We do not access, read, or use your application data except as required to provide the service (e.g. backups, maintenance) or as required by Zambian law.

3. How We Use Your Data

• To provide the service — provisioning your project, managing your database, authentication, and storage
• To communicate with you — sending transactional emails, account alerts, and product updates
• To improve the platform — analysing usage patterns to prioritise features and fix issues
• To process billing — managing subscriptions, invoices, and payment processing
• To comply with the law — meeting obligations under Zambia's Data Protection Act No. 3 of 2021 and other applicable legislation

We do not sell your data. We do not use your data for advertising purposes.

4. Data Storage & Residency

This architecture ensures compliance with the data localisation requirements of the Data Protection Act No. 3 of 2021 of Zambia by default, without requiring any additional configuration on your part.

5. Sharing of Data

We do not sell, rent, or share your personal data with third parties except in the following circumstances:

• Service providers — trusted partners who assist in operating our platform (e.g. payment processors, email delivery), bound by confidentiality obligations
• Legal requirements — where required by Zambian law, court order, or a lawful request from a government authority
• Business transfers — in the event of a merger, acquisition, or sale of Sulocorp Technologies Limited, your data may be transferred as part of that transaction. You will be notified in advance
• With your consent — where you have explicitly authorised a specific disclosure

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Upon account deletion:

• Your account data is deleted within 30 days
• Your application databases and file storage are deleted within 7 days
• Backup copies are purged within 30 days of the deletion date
• Billing records are retained for 7 years as required by Zambian tax law

7. Your Rights

Under the Data Protection Act No. 3 of 2021, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data, subject to legal obligations
• Right to restrict processing — request that we limit how we use your data in certain circumstances
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, contact us at tech@sulocorp.com. We will respond within 21 days.

8. Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls limiting who can access production systems
• Regular security audits and vulnerability assessments
• Automated daily backups with offsite redundancy

In the event of a data breach affecting your personal data, we will notify you and the Zambia Data Protection Commissioner within 72 hours of becoming aware of the breach, as required by the Data Protection Act.

9. Cookies

We use cookies to operate the platform and improve your experience. See our Cookie Policy for full details. You can manage cookie preferences at any time through your browser settings.

10. Children's Privacy

SuloBase is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, contact us immediately at tech@sulocorp.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact Us

For any privacy-related questions, requests, or complaints:

• Email: tech@sulocorp.com
• Company: Sulocorp Technologies Limited (SuloTech)
• Address: Lusaka, Zambia

You also have the right to lodge a complaint with the Zambia Data Protection Commissioner if you believe your rights have been violated.