Legal & Privacy Center

Privacy Policy

BMS, a service of CHRISTOVEMPIRE LTD, processes account, billing, security, support, localization and service-use information needed to provide and protect the platform. A subscribing business generally controls personal data it enters into BMS; BMS processes that tenant data on the business's documented instructions. BMS acts as controller for its own account, billing, security, legal-compliance and direct-service relationship data.

Data we process

• Account identity, administrator email and business contact details.
• Subscription, payment reference, provider, charged amount, currency and exchange-rate metadata. Card/payment credentials are handled by the selected payment provider.
• Authentication, rate-limit, security, audit, recovery and technical logs.
• Tenant content such as products, prices, sales, inventory, branches, staff, invoices and audits.
• Locale, time zone, interface language, invoice/print language and legal-page language preferences.
• Privacy/support requests and account-recovery metadata.

Access design

BMS does not provide platform staff with a normal dashboard for browsing customer sales, inventory, staff, reports or audit records. BMS does not provide a platform support impersonation console or a support impersonation function. Operational data is scoped to the authenticated business and its permitted roles/branches. Account recovery uses a verified Main Admin email link; support-set passwords are disabled. Exceptional technical access may occur only where necessary for a documented security incident, customer-authorized restoration, legal obligation or backup recovery and should be limited to the minimum required.

Purposes and international use

Depending on applicable law, processing may rely on contract performance, legitimate interests such as security/fraud prevention, legal obligations and consent where required. BMS does not sell personal information or use tenant data for cross-context behavioral advertising. Where cross-border transfer rules apply, BMS and its providers will use legally recognized transfer mechanisms and supplementary safeguards as required. Mandatory local privacy rights remain applicable.

Security & Access Controls

BMS uses layered browser, edge, authentication, tenant and branch controls designed to reduce unauthorized access. Browser-facing pages are served over HTTPS with HTTP Strict Transport Security (HSTS). A Content Security Policy restricts executable scripts to BMS-controlled resources, prevents framing, restricts document base URLs and object embedding and limits form destinations.

Browser write requests are accepted only from the exact origin serving the BMS session, except for specifically designated external payment-provider callbacks/webhooks. Login attempts are rate-limited, oversized mutation requests are rejected, and tenant, role and branch authorization remains enforced server-side. Legacy AppDeploy and earlier BSS Worker origins are not trusted.

No internet service can guarantee absolute security. BMS applies reasonable technical and organizational safeguards, recovery controls and access restrictions and may update protections as risks and platform capabilities evolve.

Terms of Service

By creating, purchasing, renewing or using a BMS account, the customer agrees to these Terms and the incorporated Privacy Policy, Subscription Policy, Retention Policy and DPA. The customer must provide accurate registration details, protect credentials, use BMS lawfully and ensure it has authority and an appropriate legal basis to upload and process personal data.

Customer data

The customer retains rights in its tenant content. BMS receives only the rights necessary to host, secure, back up, transmit and process that content to provide the service. BMS does not acquire ownership of the customer's operational records.

Branches, locations and sales-agent limits

BMS does not automatically create, name or designate a “Main Branch”, “Main Location” or “Headquarters” for Growth or Business customers. The Main Admin creates and names the business's own branches/locations.

A branch cap cannot be reduced below the number of agents already assigned to that branch. Branch Admins manage sales agents only within their assigned branch and within both the Main Admin-set branch cap and the plan-wide total.

Localization

Business- and branch-level locale, time-zone, interface-language, invoice/print-language and legal-language preferences control presentation and formatting. They do not rewrite shared canonical business records. Customer-entered names and free-text content remain the customer's original content unless the customer edits them.

Governing framework

These Terms are governed by the laws of the Federal Republic of Nigeria, subject to mandatory consumer, privacy or other protections that apply to the customer or data subject in another jurisdiction.

Subscription, Cancellation & Refund Policy

BMS subscriptions are prepaid for the selected fixed period: 30 days or 365 days for annual billing. For a brand-new business, a successful first payment reserves the purchased plan to the verified payment email and the paid period begins only when the first Main Admin account is securely created for that business. If account creation is postponed or the original payment return is left, the same payment email can later be entered on Create Admin to create the first Main Admin without another charge. Existing-business renewals and upgrades follow the active-subscription lifecycle shown at checkout. A purchase does not automatically renew unless BMS later offers recurring billing and the customer separately authorizes it. Customers can stop future service by not renewing.

Expiry and grace: BMS currently permits up to a 3-day workspace grace period after subscription expiry. The grace period is not an automatic renewal, does not charge the customer and does not create a new paid subscription period. After the grace period, workspace access may be restricted until a valid subscription is restored.

• Duplicate charges, confirmed payment errors and payments where BMS fails to provision the purchased service are refundable after verification.
• A first-time customer may request a refund within 7 days of the first purchase if the account has not been materially used, unless local law provides a stronger right.
• Activated renewals and upgrades are generally non-refundable except for duplicate/error charges, material service failure or where applicable law requires otherwise.
• Approved refunds are returned through the original payment method where supported and may take provider/bank processing time.

Plan catalog prices are set in NGN. USD checkout, where offered, converts the NGN amount using the displayed checkout rate and records the charged amount and rate. Provider fees, exchange-rate movements, bank charges and processing times may be outside BMS control. Mandatory statutory rights override this policy where applicable.

Data Retention & Deletion

• Active tenant data: retained while needed to provide the service, subject to applicable legal obligations and verified customer instructions.
• Recovery: BMS uses Cloudflare D1 recovery capabilities and private R2 backup archives. Recovery archives are configured for a 90-day retention window.
• Restore drills: isolated temporary restore databases may be created solely to verify recoverability and are deleted after the drill completes.
• After account closure: BMS targets deletion of active operational copies after a 30-day recovery period, subject to legal holds, fraud/security needs and verified customer instructions. Existing protected backups may remain until normal backup expiry, generally up to 90 additional days.
• Billing/payment records: retained for the period required by applicable law and legitimate accounting/dispute needs.
• Security logs: ordinarily retained only as long as reasonably needed for security, fraud prevention and incident investigation.

Deletion requests may be limited where retention is required by law, necessary for legal claims or fraud/security investigation, or technically necessary within protected backups pending normal expiry.

Privacy Rights & Request Procedure

Depending on applicable law, individuals may have rights to information/notice, access, correction, deletion/erasure, restriction, portability, objection, withdrawal of consent, non-discrimination and rights concerning automated decisions. For tenant content, the subscribing business is usually the controller and may need to handle the request; BMS will assist the business as processor where required.

We may request identity verification before acting. Requests are handled within the time required by applicable law. Individuals may also complain to the competent privacy regulator.

Data Processing Addendum (DPA)

Where the customer is controller and BMS is processor, this DPA forms part of the Terms. BMS will process Customer Personal Data only to provide, secure, localize, back up, recover and support the service and on documented customer instructions; ensure authorized persons are bound by confidentiality; apply appropriate technical and organizational safeguards; reasonably assist with data-subject requests, security obligations and breach response; delete or return Customer Personal Data at end of service subject to legal retention and protected-backup expiry; and make available information reasonably necessary to demonstrate these commitments.

The customer authorizes the subprocessors listed below, subject to appropriate data-protection obligations. The customer remains responsible for lawful instructions, legal bases, notices and user permissions.

Subprocessor Disclosure

• Cloudflare — Worker hosting, D1 databases, R2 object storage/backups, network delivery and security services.
• Paystack — payment checkout, verification and payment-related processing when selected.
• Flutterwave — payment checkout, verification and payment-related processing when selected.
• Resend — transactional email delivery, including verified-email account recovery, when enabled.

Provider locations and transfer mechanisms may change as their infrastructure changes. BMS will update this disclosure when a material subprocessor is added, replaced or its role materially changes.