Privacy policy

Last updated: 11 November 2026

BizMoro helps Nigerian business owners run their business from WhatsApp and the web: recording sales and spending, getting paid, selling online, staff, reminders and deadlines. This policy explains what information we collect, why, who we share it with, how long we keep it and the rights you have under the Nigeria Data Protection Act 2023.

BizMoro is operated by [COMPANY LEGAL NAME], RC [RC NUMBER], [REGISTERED ADDRESS], Nigeria ("BizMoro", "we", "us"). We are the data controller for the information in this policy. For questions or requests, email [email protected].

1. What we collect

You give us:

• Account details: your name, phone number, email, and the password you choose (stored only as a secure hash).
• Business details: business name, industry, state, address, CAC/RC number, staff names and phone numbers, and bank account details for payouts (stored encrypted).
• Your business records: sales, spending, debts, customers, suppliers, products, stock, invoices and anything else you add on the dashboard or WhatsApp.
• WhatsApp messages to BizMoro: your text messages, voice notes (we turn them into text), photos and videos (for example a page of your sales book, a product, a bank receipt), and documents you send.
• Identity checks for sellers: when you sell on a BizMoro store, we may check your business with the CAC and your identity with a verification partner (for example your NIN, BVN or an ID document). We only keep the result and the document you uploaded, never your card PIN.
• Support conversations: complaints, questions and chats with our team.

We collect automatically:

• Device and sign-in information: device and browser type, IP address, approximate location (city), and when you sign in. We use it to keep your account safe, for example to ask you to approve a new device.
• Usage: pages you open and features you use, to fix problems and improve BizMoro.
• Cookies: see our Cookie policy.

About other people:

• Your customers and suppliers: names, phone numbers and amounts you record, and people who pay your payment links or order from your store. For this information you are the controller and BizMoro is your processor: we use it only to provide the service to you. You must have a lawful reason to share it with us and must tell them where needed.
• Store buyers: name, phone, delivery address and order details, to fulfil the order, protect the payment and handle refunds and disputes.

We do not ask for or store card PINs, OTP codes or your bank app passwords. Never send them to anyone.

2. Why we use it, and our legal basis

We do not sell your personal information, and we do not use your business records to advertise to you or others.

3. AI and automated processing

BizMoro uses AI to understand your messages, voice notes and photos, and to suggest reports, reminders and tips. The AI proposes; you decide: money records, payment links, debts and changes to your store are only saved after you tap YES. No decision with legal or similarly significant effect on you is made by automated means alone. Our team reviews fraud flags before any action is taken on an account. Your content is not used to train public AI models.

4. Who we share it with

Only with service providers who help us run BizMoro, under contracts that require them to protect it, and only what they need:

• Meta (WhatsApp Business Platform): to send and receive your WhatsApp messages.
• AI providers: Anthropic (Claude), Google (Gemini), OpenAI: to understand messages, voice notes and photos, and to produce replies and spoken replies.
• Payments: Paystack and Flutterwave: to take payments for plans, payment links and store orders, payouts and refunds.
• Identity and business checks: Dojah (and the CAC registry), and Mono if you connect a bank account.
• Messages: Resend (email) and Termii or a similar SMS provider (sign-in codes).
• Hosting and security: our cloud host and Cloudflare.
• Your accountant, if you invite one, sees what you allow them to see.
• Authorities, when the law requires it, or to protect people from fraud or harm.

If BizMoro is sold or merges, your information moves with it under this policy, and we'll tell you first.

5. International transfers

Some providers above store or process data outside Nigeria (for example in the European Union and the United States). We only transfer data where the NDPA allows it, with adequate safeguards such as contractual commitments, and only what is needed.

6. How long we keep it

• Your account and records: while your account is open. When you delete your account, we delete your records within 30 days, including from backups.
• Payment and invoice records for BizMoro plans and services: as long as Nigerian tax and accounting law requires (usually 6 years), then deleted.
• Security logs (sign-ins, devices): up to 12 months.
• Support conversations: up to 2 years after they're closed.
• Voice notes and photos you send: we keep the text we read from them with your record, and delete the original file within 90 days unless it's attached to a record you kept (for example a product photo on your store).

7. Your rights

Under the NDPA you can:

• Know what we hold about you and how we use it, and get a copy (Dashboard → Account → Download my data).
• Correct wrong information (on your profile and records, or by asking us).
• Delete your account and data (Dashboard → Account → Delete my account, or see Data deletion).
• Move your data: the download is in common formats (CSV and JSON).
• Object to or restrict some uses, and withdraw consent at any time (for example stop offers or spoken replies).
• Not be subject to decisions made only by automated means.
• Complain to the Nigeria Data Protection Commission (ndpc.gov.ng) if you're unhappy with how we handle your data. We'd like the chance to fix it first: email [email protected].

We reply to requests within 30 days and may ask you to confirm it's you.

8. How we protect it

Encryption in transit (HTTPS) and for sensitive fields at rest (bank account numbers, keys); sign-in codes and device approval; staff access limited by role, with two-step sign-in and an audit log; regular backups. No system is perfectly secure: if a breach affects you, we'll tell you and the NDPC as the law requires (within 72 hours of becoming aware).

9. Children

BizMoro is for businesses and people 18 and over. We don't knowingly collect information from children.

10. Changes

We'll post any change here and, for important changes, tell you on WhatsApp or by email before it takes effect.

11. Contact

Data protection contact: [email protected] · [COMPANY LEGAL NAME], RC [RC NUMBER] · [REGISTERED ADDRESS], Nigeria