Privacy Policy
Last updated: 18 September 2026
This Privacy Policy explains how Bokiti Cloud ("Bokiti", "we", "us") collects, uses, stores, and shares personal data when you visit bokiti.cloud, create an account, or use our products (including Mail, Meet, Calendar, Workspaces, Forms, and related services).
Who we are
Bokiti Cloud is operated by NanleTech. We provide cloud productivity software for individuals and organisations. For privacy questions, email support@bokiti.cloud.
Data we collect
Account data: name, email address, organisation details, and authentication credentials you provide. Usage data: product interactions, device/browser information, approximate location derived from IP, and diagnostic logs needed to run and secure the service. Content you store: files, messages, calendar events, form responses, and similar content you or your organisation upload or create in Bokiti. Connected third-party accounts: if you choose to connect Google (or similar providers), we receive OAuth tokens, the connected account email, calendar event data needed for sync, and—when you start a Gmail import—message content used to copy mail into your Bokiti mailbox. Communications: messages you send us for support, demos, or sales.
Google Calendar and Gmail
Connecting Google is optional and available only after you sign in to Bokiti. When you use Connect Google, we request access to: Google Calendar events (to sync with Bokiti Calendar), Gmail in read-only mode (to import historical mail into Bokiti Mail when you start an import), and your Google account email (to show which account is connected). We use Google user data only to provide these Bokiti features for you. We do not sell Google user data. We do not use Google user data for advertising. We do not use Google user data for creditworthiness or lending decisions. We do not transfer Google user data to third parties except to subprocessors that help us operate Bokiti under contracts that protect the data, or when required by law. OAuth access and refresh tokens are stored encrypted at rest. Imported mail and synced calendar data are stored as part of your Bokiti content under the same controls as other mailbox and calendar data. You can disconnect Google at any time in Bokiti (Settings → Integrations). Disconnecting deletes the stored Google connection tokens for that account. You can also revoke Bokiti’s access in your Google Account security settings. To request deletion of related Bokiti content or your account, contact support@bokiti.cloud or use in-product account controls, subject to legal retention needs described below. Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
How we use data
We use personal data to provide and improve Bokiti services, authenticate users, process subscriptions and billing, send service and security notices, respond to support and demo requests, prevent abuse, and comply with law. Connected Google data is used only for Calendar sync and optional Gmail import as described above. We do not sell personal data.
Sharing
We share data with subprocessors that help us host, deliver email, process payments, and monitor reliability — only as needed to operate Bokiti. We may disclose information if required by law or to protect users and the platform. Organisation administrators may access data belonging to their workspace according to their role permissions. Google user data obtained via Connect Google is not sold and is not shared for advertising.
Retention
We retain account and content data while your account or organisation subscription is active, and for a limited period afterward as needed for backups, dispute resolution, and legal obligations. Google OAuth tokens are retained while the connection remains active and are removed when you disconnect Google. Imported Gmail and synced calendar events remain in Bokiti until you or your organisation delete them, or until account deletion, subject to backup and legal retention. You or your organisation admin may request deletion subject to those obligations.
Security
We apply administrative, technical, and organisational measures designed to protect personal data, including access controls, encryption in transit, encryption of OAuth tokens at rest, and monitoring. No method of transmission or storage is perfectly secure; please use strong passwords and protect your devices.
Your rights
Depending on your location and applicable law (including Nigeria's NDPR and, where relevant, GDPR), you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain processing. Contact support@bokiti.cloud to exercise these rights. Organisation-managed accounts may need to go through their administrator first. For Google connections, you can also disconnect in Bokiti or revoke access in Google Account settings.
International transfers
Bokiti may process data in countries where we or our subprocessors operate. Where we transfer personal data across borders, we use appropriate safeguards required by applicable law.
Changes
We may update this policy from time to time. We will post the revised version on this page and update the "Last updated" date. Continued use of Bokiti after changes take effect constitutes acceptance of the updated policy where permitted by law.