Privacy Policy

Rople is operated by Crescere Consulting Limited, a company registered in Nigeria (RC 8657190), of No. 2, Ayoade Street, Shomolu, Lagos State, Nigeria ("Rople", "we", "us").

This policy explains what we do with personal data when you use Rople at rople.app. It is written to comply with the Nigeria Data Protection Act 2023 and the NDPC General Application and Implementation Directive 2025.

Our status with the regulator. Crescere Consulting Limited is registered with the Nigeria Data Protection Commission as a Data Processor of Major Importance in the Ordinary High Level category. Registration was filed and the prescribed fee paid in October 2026. Our registration certificate and number will be published here when the Commission issues them. Registration in this category is renewed annually.

Our Data Protection Officer can be reached at privacy@crescerehub.com.

1. Two roles, kept apart

Rople is sold to employers. That means we handle personal data in two different capacities, and which one applies determines who decides what happens to your data.

We are a processor for everything inside a workspace. When your employer subscribes to Rople and invites you, your employer decides what data goes in, who can see it, how long it stays and what it is used for. Your employer is the data controller. We act on their instructions under a written Data Processing Agreement. This covers your profile, your goals, your reviews, your pay records, your attendance, and everything else your employer puts into its workspace, including records about your employer's own customers.

We are a controller for what is ours. Your sign in credentials, your session records, the record of which version of this policy you accepted and when, our billing and invoicing records, your support conversations with us, and our own marketing contacts. For these, we decide, and we are answerable to you directly.

Our registration with the Nigeria Data Protection Commission reflects both roles. We are registered as a processor because the great majority of personal data in Rople is held on behalf of our customers. Our obligations as a controller for our own records apply in full alongside it.

If you are an employee using Rople, most of your questions about your data should go to your employer first, because they hold the decisions. We will always help, and where the law requires us to respond to you directly we will.

2. What we hold

Your identity and access

Name, work email address, password hash (or, if you sign in with Google, the information described in section 3), assigned role (owner, organisation administrator, manager, team lead or member), team and reporting line, session records, and the record of your acceptance of this policy including the date, your IP address and your browser user agent.

Performance

Goals and key results, check in notes, feedback given and received, recognition, formal reviews, 360 degree review nominations, personal development plans, performance improvement plans, manager notes, talent grid placements, succession plans, and flight risk ratings.

Compensation

Where your employer uses the compensation features: salary history, pay band position, pay records and equity review data.

Attendance

Where your employer uses the attendance features: clock in and clock out records, and absence marks. Some absence marks are written automatically by a scheduled process that runs without a person reviewing each one. Certain custom workspaces include a front desk attendance module, which is a form of workplace monitoring and is described separately to affected employees.

Work content

Personal task lists, knowledge documents, and files uploaded into the workspace.

AI interactions

Your conversations with the Rople assistant, the retrieval memory the assistant builds to give continuous answers, and analysis records produced by the scheduled ambient analysis described in section 6, which identify individuals by reference to their user record.

Your employer's own customers and suppliers

Depending on which modules your employer uses, a Rople workspace can hold records about people who are not employees and who have no relationship with us: sales leads, customer accounts with name, email address, phone number, contract value and instalment plan, instalment records showing amounts outstanding and arrears, uploaded customer documents including offer letters, receipts and title documents, and vendor and procurement contacts.

Your employer is the controller of all of it. We hold it on their instructions and do not use it for any purpose of our own.

Our own records about your organisation

Subscription and plan records, invoices and payment records, support conversations, the workspace audit log, and records of temporary support access grants.

What we do not hold

We do not hold your payment card details. Card payments are taken on a page hosted by our payment provider and card data never reaches our systems.

Rople does not currently record or transcribe audio. An earlier version of the product transcribed one to one check ins in the browser. That feature is disabled and any recordings and transcripts captured under it are being deleted.

3. Signing in with Google

You can sign in to Rople with your Google account instead of a password. This section covers only what we receive from Google when you do, and it applies in addition to the rest of this policy.

What we receive

When you choose "Continue with Google", we ask Google for the basic sign in permissions only: openid, email and profile. With them, Google gives us:

• your name;
• your email address, and whether Google has verified it;
• your profile picture; and
• a unique identifier for your Google account, so that we recognise you next time.

We do not ask for access to your Gmail, Google Drive, Google Calendar, contacts or any other Google service, and we cannot see them. We never see or store your Google password. We do not keep the access token Google issues for your account once you are signed in.

How we use it

Only to sign you in and to set up your Rople profile: your name and picture are shown to the colleagues in your workspace, and your email address is how we identify your account, send you sign in and account emails, and check invitations sent to that address. We do not use it for anything else.

Who we share it with

Your Google sign in is handled by Supabase, our authentication and database provider, which stores the information above on our behalf. Your name, email address and picture are visible to the members of the workspace you join, as any profile is. We do not sell it, and we do not share it with anyone else except where the law requires us to.

How we protect it

It is held with the rest of your account in our database, which is encrypted in transit and at rest and protected by row level security, as described in section 11.

How long we keep it, and how to delete it

We keep it for as long as you have a Rople account. If your account is removed, it is deleted on the schedule in section 9. You can ask us to delete your account and the information we received from Google at any time by writing to privacy@crescerehub.com. You can also stop Rople using your Google account by removing Rople's access at myaccount.google.com/permissions; you can still sign in with the same email address by choosing "Forgot password?" on the sign in page to set a password.

Limited Use

Rople's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, information we receive from Google:

• is used only to provide and improve the sign in and profile features you can see;
• is never used for advertising, including targeted, personalised, retargeted or interest based advertising;
• is never sold, and never transferred to data brokers, information resellers, or anyone assessing creditworthiness or lending;
• is never used to develop, improve or train artificial intelligence or machine learning models, our own or anyone else's; and
• is not read by any person at Rople unless you ask us to, it is needed for security or to investigate abuse, or the law requires it.

4. Where it comes from

Most of it comes from you or from your employer. You enter your own goals, check ins and feedback. Your employer enters or imports your profile, role, pay and reporting line, and enters records about its own customers. Some data is generated by the system: session records, audit log entries, the scheduled attendance sweep, and the ambient analysis outputs in section 6.

We do not buy personal data, and we do not enrich your profile from external sources.

5. Why we process it, and on what basis

For data inside a workspace we act on your employer's instructions, and the lawful basis is your employer's to establish and to tell you about. Our Data Processing Agreement requires every customer to have a lawful basis and to give its staff a privacy notice. We provide a template for that notice.

For the data we control, our bases are:

We do not sell personal data. We do not use customer workspace data to train artificial intelligence models, our own or anyone else's.

6. Artificial intelligence

Rople uses AI in three distinct ways.

AI you ask for

Drafting help, summarising, and the conversational assistant. These run when you invoke them, on the text you give them. Nothing happens without your action.

AI that runs on a schedule

Rople runs a scheduled process across each workspace that assembles indicators about each employee, including goal progress, gaps between check ins, sentiment in feedback received, performance improvement plan status, recognition counts, and your attendance and absence records, and produces findings in four categories: disengagement, sentiment drift, talent risk, and performance pattern. Each finding is attached to a named individual and delivered to that person's manager.

Where your employer uses the attendance features, your arrival, departure and absence records are not used only to manage attendance. They also feed this analysis, which means a pattern in when you arrive can contribute to a conclusion about your engagement or your likelihood of leaving. Some absence marks are written automatically by a scheduled process rather than assessed by a person, so you should check your own attendance record, which you can see, and ask your employer to correct anything wrong.

It runs without a person triggering it and without a person reviewing each output before the manager sees it. If you are an employee of a workspace where this feature is enabled, analysis of your engagement and performance patterns is being produced and shared with your manager on a schedule.

We have carried out a Data Privacy Impact Assessment of this processing, and a separate assessment of the attendance features, as section 28 of the Act requires. Both are available to your employer and summaries are available to you on request.

What we commit to, and what your employer commits to. No employment decision, including any decision on pay, promotion, discipline or termination, may be taken on the basis of a Rople AI output alone. Our contract with your employer requires human review and independent judgement for any consequential decision. You have the right to object to this processing, to ask for human intervention, to express your point of view, and to contest any finding. Contact your employer in the first instance, or privacy@crescerehub.com. Your employer can also disable ambient analysis for its whole workspace.

A note on scope. This section describes what the technology does. Whether the processing is appropriate in your workplace is a decision your employer makes, and they must tell you about it before it begins.

What reaches our AI provider

We use Anthropic to process AI requests. For scheduled ambient analysis, records sent to Anthropic carry a pseudonymous identifier rather than your name. For AI features you invoke yourself, the text you submit is sent as you wrote it, so if you type a colleague's name into the assistant, that name is sent.

Pseudonymised data is still personal data. Anthropic processes it on our instructions only.

7. Who else sees it

We use a small number of service providers. Each is listed, with what it does and where it is located, in our sub-processor list, which forms part of our Data Processing Agreement. In summary: our database, authentication and file storage are with Supabase; our application is hosted by Vercel; AI processing is by Anthropic; transactional email is sent by Resend; and subscription payments are taken by Squad.

We will give at least thirty days' notice by email to workspace owners before adding a new sub-processor, and customers may object.

Beyond those providers, we disclose personal data only where we are legally required to, where it is necessary to establish or defend a legal claim, or where you or your employer instruct us to.

If Crescere is acquired or merges, personal data may transfer as part of that transaction. We would tell affected customers before it happened.

8. Data leaving Nigeria

Four of our five service providers are in the United States, so personal data held in Rople leaves Nigeria in the ordinary running of the service. Under the Nigeria Data Protection Act, transfer outside Nigeria requires an adequacy decision or an appropriate transfer instrument, and no adequacy decision covering the United States is currently in force. We rely on written data processing agreements incorporating standard contractual clauses with each provider, supported by an assessment of the recipient jurisdiction. That assessment is available on request at privacy@crescerehub.com.

9. How long we keep it

Full detail is in our Data Retention and Deletion Schedule, which lists every category and its period. In summary:

• Workspace data is kept for as long as your employer subscribes.
• After cancellation, the workspace remains accessible for export for thirty days, and is deleted within a further thirty days.
• Deletion from live systems propagates through our backups as those backups age out, which takes up to a further thirty days. Deletion is therefore complete rather than instantaneous.
• Records of your acceptance of our terms, and our accounting and tax records, are kept longer because the law requires it.

If you leave your employer, your employer decides what happens to your records within its workspace, and can delete or anonymise them.

10. Your rights

Under the Nigeria Data Protection Act you have the right to be told how your data is used, to get a copy of it, to have inaccurate data corrected, to have data erased in defined circumstances, to restrict or object to processing, to receive your data in a portable form, to withdraw consent where consent is the basis, and not to be subject to a decision based solely on automated processing where it significantly affects you.

How to use them. If the data is in your employer's workspace, ask your employer, because they hold the decisions. If they need our help to answer you, we are contractually required to give it. For data we control ourselves, write to privacy@crescerehub.com. We respond within one month and will tell you if we need longer.

We do not charge for this, and we will not treat you differently for asking.

If we get it wrong. You can complain to us at privacy@crescerehub.com, and you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng. Complaining to us first is usually faster, but you are not required to.

11. Security

Detail is in our Security Overview, which includes an honest account of work still in progress. In summary: every workspace table is protected by row level security enforced at the database rather than in application code; data is encrypted in transit and at rest; access to production systems is limited and logged; and where Rople staff need to enter a customer workspace to give support, access is a revocable grant capped at twenty four hours, enforced at the database level, and written to that workspace's audit log.

No system is perfectly secure. If a breach affects your personal data we will notify the Nigeria Data Protection Commission within seventy two hours as the Act requires, and we will tell affected customers and, where the law requires, affected individuals.

12. Cookies

Rople sets five cookies, all strictly necessary to sign you in and to protect workspaces during support. We set no analytics, advertising or third party cookies. See our Cookie Policy.

13. Children

Rople is a workplace tool and is not intended for anyone under eighteen. We do not knowingly collect data about children. If you believe a child's data has been entered into Rople, tell us at privacy@crescerehub.com and we will remove it.

14. Where this policy applies

This policy is written for Nigeria and the Nigeria Data Protection Act is the regime we work to. Rople is sold in Nigeria. If your organisation has staff in the European Union or the United Kingdom, additional terms apply and must be agreed before those staff are added to a workspace. Contact legal@crescerehub.com.

15. Changes

If we change this policy we will publish the new version, update the version number, and ask you to accept it the next time you sign in. We keep a record of which version you accepted and when. Material changes are notified by email to workspace owners in advance.

What changed in version 1.2. We added our registration status with the Nigeria Data Protection Commission, a note on how that registration relates to our two roles, and a reference to the Data Privacy Impact Assessments of the AI and attendance features. No processing described in this policy changed.

16. Contact

Crescere Consulting Limited, RC 8657190, No. 2, Ayoade Street, Shomolu, Lagos State, Nigeria. NDPC Data Processor of Major Importance (Ordinary High Level). Registration number: to be published on issue.