Privacy Policy
Effective Date: 1 July 2026 · Version 1.0
Azmahpoint Nigeria Limited
RC Number: CAC RC: 8737386
Registered Address: Opposite Mawo Secondary School, Dutsen Kura Gwari, Minna, Niger State, Nigeria
Data Protection Officer: support@azmahpoint.com.ng
1. Introduction
Azmahpoint Nigeria Limited ("Company", "we", "us") operates the OrderBot platform. This Privacy Policy explains how we collect, use, disclose, and protect personal data in compliance with the Nigeria Data Protection Act 2023 (NDPA).
By using the Platform, you consent to the collection and use of your data as described in this Policy.
2. Data We Collect
2.1 Vendor Data
| Category | Examples |
|---|---|
| Identity | Business name, owner name |
| Contact | Email, phone number, WhatsApp number |
| Financial | Bank account details (for Paystack payouts) |
| Subscription | Plan type, payment history, token balance |
| Content | Menu items, product images, pricing |
2.2 Customer Data (processed on behalf of Vendors)
| Category | Examples |
|---|---|
| Contact | WhatsApp phone number |
| Order data | Items ordered, delivery address, order reference |
| Payment status | Paid/unpaid (we do not store card numbers) |
| Behavioural | Ratings, loyalty points balance |
The Company acts as a data processor for Customer data. The Vendor is the data controller and is independently responsible for lawful processing of their customers' data.
2.3 Agent Data
| Category | Examples |
|---|---|
| Identity | Full name |
| Contact | Email, phone number |
| Financial | Bank account details for commission payouts |
| Performance | Leads submitted, commissions earned |
3. How We Use Your Data
We use the data we collect to: manage accounts and subscriptions; process payments; operate the WhatsApp bot and deliver order notifications; provide customer support; detect and prevent fraud; comply with legal obligations; send transactional emails; and calculate and disburse agent commissions.
4. Data Sharing
We do not sell your personal data. We share data with trusted third-party processors only:
| Provider | Purpose | Data Shared |
|---|---|---|
| Paystack | Payment processing | Email, amount; no card numbers stored by us |
| Meta (WhatsApp) | Message delivery | Customer phone number, message content |
| MongoDB Atlas | Database hosting | All Platform data (encrypted at rest) |
| Railway | Server hosting | All Platform data (encrypted in transit) |
| Cloudinary | Image storage | Uploaded menu images |
| Termii | SMS notifications | Phone numbers, order status messages |
| Mailjet / Resend | Transactional email | Email addresses, message content |
We may also disclose your data when required by Nigerian law, court order, or regulatory authority.
5. Data Retention
| Category | Retention Period |
|---|---|
| Vendor account data | Duration of subscription + 2 years after termination |
| Order data | 5 years (tax and audit purposes) |
| Payment records | 7 years (statutory requirement) |
| Agent data | Duration of engagement + 2 years |
| Technical / log data | 90 days |
6. Data Security
We implement HTTPS/TLS encryption for all data in transit, database encryption at rest (MongoDB Atlas), HTTP-only Secure cookies for authentication, bcrypt password hashing (cost factor 12), rate limiting on all authentication endpoints, and role-based access control.
7. Your Rights Under the NDPA
| Right | Description |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Request correction of inaccurate or incomplete data |
| Erasure | Request deletion of your personal data, subject to legal retention obligations |
| Restriction | Request that we limit processing in certain circumstances |
| Object | Object to processing based on legitimate interest |
| Data Portability | Receive your data in a structured, machine-readable format |
| Withdraw Consent | Withdraw consent at any time where processing is consent-based |
Submit requests to support@azmahpoint.com.ng with subject line "Privacy Request — [Your Name]". We respond within 21 days as required by the NDPA.
You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
8. Cookies
We use only strictly necessary cookies (authentication session, 24-hour expiry) and optional analytics cookies (30 days, aggregated and anonymised). We do not use advertising or tracking cookies.
9. Children's Privacy
The Platform is not directed at individuals under 18. Contact us immediately at support@azmahpoint.com.ng if you believe we have inadvertently collected data from a minor.
10. Changes to This Policy
Material changes will be communicated to Vendors by email at least 14 days before taking effect. Continued use of the Platform after the effective date constitutes acceptance.
11. Contact Us
Azmahpoint Nigeria Limited
Email: support@azmahpoint.com.ng
Subject: "Privacy Request — [Your Name]"
© 2026 Azmahpoint Nigeria Limited. All rights reserved.