Last updated 27 October 2026. Questions about this page? Use the message form on our Support page.
1. Who's responsible
Muqbala Technology Limited (RC 9537830), Imo State, Nigeria, is the data controller for Jarosuites. We follow the Nigeria Data Protection Act 2023 (NDPA). For anything about your data, use the message form on our Support page.
2. What we collect
- Account details: your name, email, password (stored scrambled, never readable) or your Google sign-in, and your plan.
- Your content: files, signatures, stamps, letterheads, forms and their answers, and certificates you issue.
- Signing records: who opened and signed a document, when, and the IP address, to prove it was them.
- Basic usage: sign-in times and devices (shown to you under Login activity), and error logs to fix problems.
We don't use advertising trackers and we don't sell your data.
3. Why we use it
- To run your account and the features you use (that's the contract between us).
- To keep accounts safe and stop abuse (our legitimate interest).
- To meet legal duties, like tax records once payments are on.
- To send emails you'd expect: signing requests, reminders, receipts. You can turn off non-essential ones.
4. Where it's kept
Jarosuites runs on Cloudflare. Your files are stored in Cloudflare R2 and your account data in Cloudflare D1. Cloudflare may store and process it in data centres outside Nigeria, with protections the NDPA allows for transfers. AI features send the text you ask about to Cloudflare Workers AI, which doesn't keep it for training.
5. Who can see it
- People you share a file, document, form or certificate with.
- Anyone who scans a certificate's QR code sees the name, title, issuer and date on it.
- Our service providers (Cloudflare, and our payment provider once payments start), only to run the service.
- Authorities, if the law makes us.
6. How long we keep it
We keep your content while your account is open. Signing records are kept for as long as the signed document is, because they prove the signature. When you close your account we delete its files within 30 days, except what the law makes us keep.
7. Your rights
Under the NDPA you can ask us to:
- show you the data we hold about you, and give you a copy;
- correct anything wrong;
- delete your data and close your account;
- stop or limit some uses of it, or object to them.
Ask us through the message form on our Support page. We'll reply within 30 days. You can also complain to the Nigeria Data Protection Commission.
8. Cookies
We use one cookie to keep you signed in, and a few saved settings in your browser (like whether you've seen a tour). No advertising cookies.
9. Security
Everything travels over HTTPS. Passwords are hashed. Stamps can't be downloaded. Documents can be locked with an access code. If something goes wrong with your data, we'll tell you and the regulator as the law requires.
10. Children
Jarosuites is for adults and businesses. We don't knowingly collect data from children under 18.
11. Changes
If we change this policy in a way that matters, we'll tell you before it takes effect. See also our terms of service.