Keepable Sender Agreement
Version 2026-07-01. This Agreement is between Ciphersec Limited (“Keepable”), a company incorporated in the Federal Republic of Nigeria, and the organisation applying for a sender account (“you”). It governs everything you send through Keepable. Our Terms of Service cover recipient mailboxes; the Data Processing Addendum forms part of this Agreement and governs personal data you send us.
You accept this Agreement when you submit an application for a sender account. Accepting it is part of applying: we review your application against these terms, so you agree to them before anyone looks at it.
1. What Keepable does
Keepable is a digital mailbox. You deliver bills, statements, agreements, consent requests and notices to a person’s mailbox, addressed by their National Identification Number or their verified email. They read, sign, download and verify those documents from any device, and they keep them.
We are the delivery and evidence layer. We are not the author of what you send, we do not decide what you send, and we do not decide who you send it to.
2. Getting approved
You cannot send to real recipients until we have verified your business. The sandbox is open before that, and everything sent there is synthetic and free.
What we check. Your registered name and CAC number against the Corporate Affairs Commission register, your tax records, and the identity of the person applying, through an accredited identity-verification provider.
Your director confirms. A company’s CAC record names directors but carries no identifier for them, so a name alone cannot tell us that the person you name is the person we reached. We therefore ask the director you name to confirm, in their own Keepable, that they agree to be recorded as the responsible officer for your account. We will not approve an account without that confirmation. If the applicant states that they are themselves the director, we still ask. The confirmation is what makes the naming mean anything.
You warrant that the director you name holds that office, that you are authorised to bind your organisation to this Agreement, and that everything in your application is true.
What we keep, and why. We record the last four digits of each National Identification Number we are given, the verified name returned by the registry, and a reference to the check. We also retain the numbers themselves, encrypted, so that if a sender account is later used to impersonate a business there is a person we and the authorities can identify. This is disclosed to each person at the point we collect it. It is held for the life of the account and the period afterwards during which a claim arising from it could be brought, and there is no routine access to it: it is opened only on a specific investigation.
3. Your account, your keys
You are responsible for everything sent under your account. Keep your API keys secret; treat a leaked key as a compromised account and rotate it. Sandbox and live keys are distinct, and a sandbox key can never reach a real person.
Members you invite act for you. Removing a member is your job, not ours.
4. What you may send
You may send documents to people who have a relationship with you and a lawful basis to receive them. You may not use Keepable for unsolicited marketing, for anything unlawful, for content designed to deceive a recipient about who sent it, or to impersonate another organisation.
Do not collect identity or access information for Keepable. You may not ask a recipient to send you their NIN, face capture, passkey, password, BVN or OTP on Keepable’s behalf, or tell them that Keepable requires them to provide any of those items to you. Keepable handles its own identity check; you must not turn a delivery notice into a credential or identity-data collection form.
What we do to what you send. We sanitise the HTML you supply, strip metadata from files you upload, render your document to a sealed PDF, and hash and seal the result. We do not edit your words. Where a document type requires a disclosure under Nigerian data-protection law (a purpose, a lawful basis, a retention note), we require it before the send goes out, because a document that cannot say why it exists is one the recipient cannot act on.
We may hold a delivery where the recipient’s mailbox does not meet the assurance the content requires. Binding correspondence needs an identity-verified recipient; we will not deliver it to a mailbox proven only by email.
5. Data protection
For the personal data you send through Keepable, you are the data controller and we are your processor under the Nigeria Data Protection Act 2023. You decide the purpose; we carry it out on your instruction. The DPA sets out the detail and takes precedence over this section where they differ.
Two consequences worth stating plainly, because they surprise people:
- Consent is yours to honour. Where you collect a person’s consent through Keepable, the record is ours to keep and yours to act on. If they withdraw it, the mechanism is yours: we can show that they withdrew, and we cannot make you stop.
- A recipient’s mailbox is theirs, not yours. A document delivered to a person stays available to that person. Ending this Agreement does not withdraw what you have already sent.
For the data we hold about you (your business records, your members, the identity checks above), we are the controller, and our Privacy Notice applies.
6. Money
Delivery is prepaid. You add credit to your account and each live delivery draws against it; a send with insufficient credit does not go out. Sandbox sends draw nothing. Current prices are those published in your account at the time of the send.
Credit is not refundable for change of mind and does not expire except where it was granted as a promotional credit, in which case its expiry is stated when it is granted.
7. Sealing, receipts and verification
Every document we deliver is hashed and sealed, and carries a receipt code. Anyone holding the file can check it against our public verifier without an account, and either the file is the one we sealed or it is not.
That is a statement about integrity, not about the truth of what your document says. We seal what you send. Whether it is correct is between you and your recipient.
Where a recipient signs, the signature is bound to the credential they authenticated with. We record how they proved who they were, and that record travels with the document.
8. Suspension
We may suspend an account without notice where we believe it is being used to impersonate an organisation, where sending is unlawful, where a security compromise makes suspension the safer course, or where a director withdraws the confirmation their account was approved on.
Suspension stops sending. It does not delete what you have already sent, and it does not remove documents from the mailboxes of people who received them.
Where the reason is correctable, we will say what it is and what would fix it.
9. Term and ending it
This Agreement runs until either of us ends it. You may close your account at any time from the portal. We may end it on 30 days’ written notice, or immediately in the circumstances in section 8.
On termination: sending stops, unspent credit is forfeited unless the termination was ours and without cause, and we retain your business and identity records for the periods set out in section 2 and in the DPA. Documents already delivered remain with their recipients.
10. Liability
Neither of us excludes liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be excluded.
Otherwise, neither of us is liable for indirect or consequential loss, or for loss of profit, revenue, goodwill or anticipated savings. Our total liability arising out of this Agreement is limited to the fees you paid us in the twelve months before the event giving rise to the claim.
You will indemnify us against claims brought by a recipient or a regulator arising from what you sent, from your lawful basis for sending it, or from a breach of section 4.
11. Changes
We may revise this Agreement. Where a revision materially changes your obligations we will give you 30 days’ notice and ask you to accept the new version; where it does not, we will publish it and note the version. Your account records which version you accepted and when.
12. Governing law
Nigerian law governs this Agreement. The courts of Lagos State have exclusive jurisdiction, save that either of us may seek injunctive relief in any competent court.
13. Contact
Ciphersec Limited, senders@keepable.co. Data-protection questions: dpo@keepable.co.