Perennus connects to your marketing platform with read-only access, reads what is already there, and gives you a diagnostic. This page explains exactly what we collect, why, where it lives, and how to get it deleted. It is written to be read — not to be survived.
Perennus is a revenue leak detection service for subscription businesses, operated by Isaac Olukoya, a sole operator based in Lagos, Nigeria. In this policy, "Perennus", "we", and "us" mean that operator. "You" means the person or company using the service.
For any privacy question, or to exercise any right described below, email isaac@isaacolukoya.com.ng. We are the data controller for the account data described in section 2, and a data processor acting on your instructions for the workspace data we read from your marketing platform.
Your email address, company name, password (stored only as a hash by our authentication provider — we never see or store your plaintext password), plan, and the timestamps of your logins and scans.
When you connect a marketing platform, we read data that already exists in your workspace: campaigns, newsletters, segments, and aggregate contact statistics — total contacts, unsubscribed counts, bounced counts, engagement activity by 30/60/90-day windows, recently created contacts, and whether unsubscribed contacts appear in active segments. A limited sample of individual contact records is read to compute engagement statistics.
The scores, findings, dollar estimates, and recommendations we generate from your workspace data, plus the history of those scans over time.
Alert preferences, Slack webhook URL (if you connect one), average deal value, billing cycle, and currency.
If you subscribe to The Perennus Letter, your email address is collected and processed by Beehiiv. If you book a call, your details are collected by Lemcal. Aggregate, non-identifying traffic statistics for perennus.com are collected server-side by Netlify Analytics.
We ask for read-only access, and we never write to your workspace. Perennus does not send emails, edit campaigns, modify segments, add or remove contacts, or change any setting in your Customer.io, Klaviyo, or HubSpot account. It reads, scores, and reports.
You control the scope of what we can see. We recommend issuing a key restricted to read-only permissions, and we recommend revoking it in your platform's own settings the moment you stop using Perennus — that immediately and permanently ends our access, regardless of anything on our side.
Your API key or access token is stored in our database (hosted by Supabase) so that scheduled scans can run without you re-entering it. It is transmitted over TLS and is never displayed back to you in full, shared with any third party, or used for any purpose other than running your scans. If you delete your account, the credential is deleted with it.
We do not sell your data. We do not share it with advertisers. We do not use your workspace data to train machine learning models, and we do not use one customer's data to inform another customer's report except in aggregate, fully anonymised form (for example, an industry benchmark computed across many workspaces, from which no individual workspace can be identified).
Where the UK GDPR or EU GDPR applies to you, we rely on these legal bases:
We use a small number of subprocessors to run the service. Each receives only what it needs:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database and authentication | Account data, credentials, scan results |
| Netlify | Hosting and serverless functions | Request data, server-side traffic statistics |
| Anthropic | AI diagnostic analysis | Aggregated workspace metrics (see section 7) |
| Resend | Transactional email | Email address, message content |
| Beehiiv | Newsletter | Subscriber email address |
| Lemcal | Call booking | Name, email, booking details |
| Slack | Alerts, only if you connect a webhook | Alert content you have enabled |
We may also disclose data where we are legally required to, or to protect our rights or the safety of others. If Perennus is ever acquired or merged, data may transfer as part of that transaction — you will be told before that happens and given the chance to delete your account first.
The diagnostic engine uses Anthropic's Claude API to turn your workspace metrics into findings and recommendations. What we send is aggregated and statistical — counts, rates, campaign names, segment names, and engagement distributions. Anthropic does not use data submitted through its API to train its models. We do not send raw contact lists, and we do not send email addresses of your contacts.
Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, export it in a portable format, restrict or object to how we process it, and withdraw consent where processing is based on consent. If you are in California, you additionally have the right to know what personal information is collected and to opt out of any sale of personal information — we do not sell personal information.
To exercise any of these, email isaac@isaacolukoya.com.ng. We will respond within 30 days. You will not be charged, and we will not treat you differently for asking. If you are in the UK or EU and are unhappy with our response, you may complain to your local supervisory authority.
Perennus is operated from Nigeria, and our subprocessors operate primarily in the United States and the European Union. If you are in the UK, EU, or another region with data transfer rules, your data will be transferred outside your home jurisdiction. Where required, we rely on Standard Contractual Clauses or equivalent safeguards offered by our subprocessors.
The marketing site at perennus.com sets no advertising or tracking cookies. Traffic statistics are collected by Netlify Analytics, which measures requests server-side — it sets no cookies, runs no script in your browser, and does not track you across sites. This is why you are not being shown a cookie banner.
The product at monitor.perennus.com sets cookies and uses local storage strictly to keep you signed in. Embedded third-party content — the Beehiiv newsletter form and Lemcal booking widget — may set its own cookies under its own privacy policy.
All traffic is encrypted in transit with TLS. Data is encrypted at rest by our database provider. Access to production systems is limited to the operator. Passwords are hashed, never stored in plaintext. API credentials are never rendered back to the browser in full.
Perennus is not currently SOC 2 certified. We would rather say that plainly than imply a certification we do not hold. If a data breach affects your personal data, we will notify you and any required regulator without undue delay.
Perennus is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, email us and we will delete it.
If we change this policy materially, we will update the date at the top and email account holders before the change takes effect. Continued use after that means you accept the updated policy.
Isaac Olukoya, Perennus — Lagos, Nigeria
isaac@isaacolukoya.com.ng