Optipropose Studio ("we", "us", or "our") is a software company based in Abuja, Nigeria. We operate the following products:
This Privacy Policy applies to all products operated by Optipropose Studio (collectively, the "Services"). By using any of our Services, you agree to the collection and use of information as described here.
1. Information We Collect
OptiPropose
- Account information — email address and password
- Profile data — your name and company name
- Proposal content — client names, project details, and scope you enter to generate proposals
- Usage data — pages visited, features used, browser type, and IP address
CordHR
- WhatsApp phone numbers — collected when employees interact with the CordHR bot
- Employee records — name, role, department, and leave balances entered by HR administrators
- Leave requests — leave type, dates, and reason submitted via WhatsApp
- Payslip data — gross pay, net pay, and deductions uploaded by HR administrators
- HR documents — PDF files (employee handbooks, policies) uploaded by administrators
- WhatsApp message content — messages sent to the bot are processed to provide HR responses
- Company account information — administrator email, company name, and WhatsApp Business number
2. How We Use Your Information
OptiPropose
- To generate AI-powered proposals based on your inputs
- To save and display your proposal history
- To manage your account and send product updates
CordHR
- To operate the WhatsApp HR bot and respond to employee requests
- To process and track leave requests on behalf of the employer
- To deliver payslip information to employees via WhatsApp
- To answer HR policy questions using uploaded documents
- To provide the HR admin dashboard to company administrators
We do not sell personal data to third parties.
3. WhatsApp Data Processing (CordHR)
CordHR integrates with the Meta WhatsApp Cloud API to receive and send messages. When an employee interacts with the CordHR bot via WhatsApp:
- Their WhatsApp phone number is used to identify them within their employer's account
- Message content is processed by our AI system to generate appropriate HR responses
- Message content is not stored permanently beyond what is needed to complete the request
- Phone numbers are stored only in association with the employer's (tenant's) account
CordHR does not use WhatsApp data to build advertising profiles, does not share WhatsApp data with other tenants, and does not sell WhatsApp user data.
4. AI Processing
Both products use AI to process your inputs. Content you submit is sent to our AI providers for processing under strict confidentiality terms. We do not use your content to train external AI models.
- OptiPropose — uses large language model APIs for proposal generation
- CordHR — uses Google Gemini for intent classification and HR Q&A
5. Third-Party Services
- Firebase / Google — authentication and database (OptiPropose)
- Supabase — database and file storage (CordHR)
- Meta WhatsApp Cloud API — WhatsApp messaging (CordHR)
- Google Gemini — AI processing (CordHR)
- Vercel / Firebase Hosting — application hosting
- Paystack — payment processing (CordHR billing)
Each provider operates under their own privacy and data protection terms.
6. Data Deletion
You may request deletion of your data at any time:
- OptiPropose users — email kodehausdev@optipropose.com with the subject "Delete my account"
- CordHR company admins — email us to delete your company account and all associated employee data
- Employees (WhatsApp users) — contact your HR administrator, or email us directly with your phone number to request removal from our system
We will process all deletion requests within 30 days.
7. Data Retention
We retain data for as long as your account or company subscription is active. Payslip and leave records are retained for the duration of the employment relationship as required by Nigerian labour law. Upon account deletion, all personal data is permanently removed within 30 days.
8. Security
All data is transmitted over HTTPS. Databases are encrypted at rest. Access to employee and payslip data is restricted by row-level security — company A cannot access company B's data. We conduct regular security reviews of our infrastructure.
9. Your Rights
You have the right to access, correct, export, or delete your personal data. To exercise any right, contact us at the address below. We respond within 30 days.
10. Children's Privacy
Our Services are not directed to individuals under 18. We do not knowingly collect data from minors.
11. Changes to This Policy
We may update this policy periodically. Registered users will be notified of significant changes by email. The date at the top of this page reflects the latest revision.