Privacy policy
Last updated 17 October 2026
Tepplo tells businesses the moment one of their customers is slipping away, ready to grow or forgotten. This page explains what we collect to do that, why, who helps us, and the choices you have. If anything is unclear, write to hello@tepplo.com.
Who we are
Tepplo is a company based in Rwanda. For the personal data in your account we decide how it is used. For the data your business sends us about your own customers, we act on your instructions: you decide what to send, and we use it only to run Tepplo for you.
What we collect
- Your account: your name, email address and, if you sign in with Google, the basic profile Google shares (name, email and picture). We never see your Google password.
- Your company: its name, currency, team members and the settings you choose.
- Data your app sends us: through your company’s private key, your app sends events about your customers, such as their name or ID, what they do in your app and payments. You choose what to send.
- Enquiries: if you use the form on our website, your email address, company and message.
- Basic technical data: like any website, our hosting provider sees IP addresses and request details to keep the service secure.
How we use it
- To run Tepplo: sign you in, show your dashboard, and work out which customers need attention.
- To tell you: when a customer needs attention, we email the company’s owners and admins and the teammate who looks after that customer. Owners and admins can turn alert emails off for the company in Settings; to stop receiving them yourself, write to hello@tepplo.com.
- To reply to enquiries and support requests.
- To keep Tepplo secure, prevent abuse and meet legal obligations.
We do not sell data, we do not use it for advertising, and we do not use your customers’ data to train AI models.
AI
Clear rules decide who needs you, and the reason shown on each alert comes from those rules. Tepplo does not send your data to any AI model today. We plan an assistant that writes reasons in plain words and drafts replies; before it is available we will update this page, and nothing will be sent to one of your customers until someone on your team approves it.
Who helps us run Tepplo
We share data only with providers that help us run the service, under agreements that limit them to that purpose:
- Cloudflare hosts Tepplo and stores its data. Each company’s data is kept in its own private space, never mixed with another company’s.
- Google provides sign-in with Google (only if you choose it) and our own email.
- Resend sends Tepplo’s emails, such as sign-in links and alerts, from servers in the European Union (Ireland).
If we add a provider that handles personal data, for example for payments, we will list it here before it does.
Where data is stored
Cloudflare runs on a global network, so data may be processed outside your country. We choose providers that protect data to the standard the law requires, and our email provider processes data in the European Union.
How long we keep it
We keep your account and company data while your company uses Tepplo. If you ask us to delete your company, we delete its data within 30 days, except where the law requires us to keep something longer. Enquiries are kept for as long as we need them to follow up.
Your rights
Depending on where you live, including under Rwanda’s data protection law (Law No. 058/2021) and Nigeria’s Data Protection Act 2023, you can ask to see, correct, export or delete your personal data, object to how we use it, or withdraw consent. Write to hello@tepplo.com and we will reply within 30 days. If your business is our customer and the request is about its own customers, we will help your business respond. You can also complain to your data protection authority, such as Rwanda’s National Cyber Security Authority.
Cookies
Tepplo uses one cookie to keep you signed in. We do not use advertising or tracking cookies.
Security
Data is encrypted in transit. Each company’s data is kept separate, every request checks that you belong to the company you are viewing, and access keys can only send data, never read it.
Changes
If we change this policy in a way that matters, we will update the date above and tell account owners by email.