Privacy Policy

We collect information you provide directly to us when you create an account, sign up for a trial, subscribe to our services, or communicate with us. This includes:

• Account Information: Your name, email address, phone number, business name, and business address.
• Billing Information: Payment card details and billing addresses (processed securely by our payment partner, Paystack).
• Business Data: Orders, products, customer details, delivery addresses, inventory records, and logistics information that you enter into our platform.
• Communications: Any correspondence you send to us, including support requests and feedback.

We also automatically collect certain information when you use our platform, including:

• Usage Data: Pages visited, features used, time spent on the platform, and interaction patterns.
• Device & Browser Information: IP address, browser type, operating system, and device identifiers.
• Cookies & Similar Technologies: We use cookies to maintain your session, remember preferences, and analyse usage. See our Cookie Policy for details.

We use the information we collect for the following purposes:

• To Provide and Maintain Our Service: Operate, maintain, and improve the NovatraCloud platform, process transactions, and provide customer support.
• To Communicate With You: Send service-related updates, billing information, technical notices, security alerts, and support messages.
• To Send Marketing Communications: With your consent, we may send you product updates, tips, and promotional materials. You can opt out at any time.
• To Improve Our Platform: Analyse usage patterns, troubleshoot issues, and develop new features that benefit our users.
• To Comply With Legal Obligations: Fulfil our obligations under applicable Nigerian laws and regulations.

We do not sell your personal information. We may share your data only in the following circumstances:

• Service Providers: With trusted third-party vendors who help us operate our platform, such as Paystack (payment processing), Supabase (database hosting), Vercel (application hosting), and Resend (email delivery). These providers are contractually bound to protect your data.
• Legal Requirements: When required by law, court order, or governmental regulation in Nigeria.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, we may transfer your information to the acquiring entity.
• With Your Consent: We may share your information when you have given us explicit consent to do so.

We take the security of your data seriously. We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security).
• Access Controls: Strict role-based access controls ensure that only authorised users can access your data within your workspace.
• Row-Level Security: Multi-tenant data isolation is enforced at the database level, ensuring your data is never accessible to other workspaces.
• Regular Backups: We maintain encrypted backups of your data to prevent loss.
• Security Audits: We regularly review our security practices and infrastructure.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We retain your personal information for as long as your account is active or as needed to provide you with our services. After you delete your account or terminate your subscription, we will retain your data for a period of 90 days to allow for data export, after which it will be securely deleted or anonymised.

We may retain certain information longer where required by applicable Nigerian laws or for legitimate business purposes such as fraud prevention and legal compliance.

Under the Nigeria Data Protection Regulation (NDPR) and other applicable laws, you have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to certain exceptions.
• Restriction: Request that we restrict processing of your data.
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Objection: Object to processing of your data for marketing purposes.
• Withdrawal of Consent: Withdraw consent at any time where we rely on consent to process your data.

To exercise any of these rights, please contact us at the email address below. We will respond to your request within 30 days.

Our platform integrates with third-party services that you may choose to connect to your workspace, including:

• Paystack: For payment processing. Paystack's privacy policy governs how they handle your payment information.
• WhatsApp: For customer notifications. Your messaging data is processed according to WhatsApp's privacy policy.
• Supabase: For database and authentication services.

We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies before using their services through our platform.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information promptly.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and, where appropriate, by email notification. We encourage you to review this policy periodically.

The “Last Updated” date at the top of this page indicates when this policy was last revised.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We are committed to resolving any complaints about our collection or use of your personal data. If you are unsatisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).