Privacy Policy

1. Introduction

BizSoft Technologies Limited ("BizSoft", "we", "us", or "our") is committed to protecting your privacy and handling your personal data with transparency, care, and responsibility. This Privacy Policy ("Policy") describes how we collect, use, process, store, share, and protect personal data in connection with our cloud-based ERP and accounting platform accessible at app.bizsoft.com.ng and our website at www.bizsoft.com.ng (collectively, the "Platform").

This Policy applies to:

• Visitors to our website;
• Prospective customers who inquire about our services;
• Registered users and account administrators of the Platform;
• Employees or representatives of our business customers who are granted access to the Platform; and
• Any other individual whose personal data we process in connection with our services.

Please read this Policy carefully. By using the Platform, you acknowledge that you have read and understood how we handle your personal data. This Policy should be read alongside our Terms of Use.

2. Data Controller Information

For the purposes of applicable data protection law, the Data Controller of your personal data is:

• Company Name: BizSoft Technologies Limited
• Country of Incorporation: Federal Republic of Nigeria
• Data Protection Officer (DPO) Email: legal@bizsoft.com.ng
• General Contact: support@bizsoft.com.ng
• Website: www.bizsoft.com.ng

Where BizSoft processes personal data on behalf of our business customers (i.e., data relating to their employees, suppliers, or end-customers entered into the Platform), BizSoft acts as a Data Processor and the business customer is the Data Controller for that data.

3. Information We Collect

3.1 Information You Provide Directly

• Account Registration Data: Name, email address, phone number, job title, company name, business address, and account credentials.
• Business and Customer Data: Data you input into the Platform, including details of your employees, customers, suppliers, products, financial transactions, and business operations.
• Payment Information: Billing details, payment method information (processed securely via our payment processors — we do not store full card numbers on our servers).
• Communications: Messages sent to our support team, feedback forms, survey responses, and email correspondence.
• Identity Verification: For certain account types, we may request documentary evidence of identity or business registration.

3.2 Information Collected Automatically

• Usage Data: Pages visited, features used, actions performed within the Platform, frequency and duration of use, error logs, and crash reports.
• Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and referring URL.
• Log Data: Server-side logs recording access to our services, including timestamps, session identifiers, and API call records.
• Cookies and Similar Technologies: Session cookies, persistent cookies, and similar technologies as described in Section 11.

3.3 Information from Third Parties

• Payment Processors: Transaction confirmation data from payment providers such as Paystack or Flutterwave.
• Referral Partners: Contact information where you have been referred to BizSoft by an authorised partner.
• Publicly Available Sources: Publicly available business information for customer due diligence purposes.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Platform: To create and manage your account, deliver and maintain the services you have subscribed to, process transactions, and provide technical support.
• Onboarding and Training: To assist you in setting up and getting the most out of the Platform.
• Billing and Payments: To process subscription fees, issue invoices and receipts, and manage billing disputes.
• Customer Support: To respond to your enquiries, resolve technical issues, and improve the quality of our support services.
• Platform Improvement: To analyse usage patterns, conduct research, and develop new features and enhancements.
• Security and Fraud Prevention: To monitor for suspicious activity, investigate potential security incidents, enforce our Terms of Use, and protect the integrity of the Platform.
• Legal Compliance: To comply with applicable laws and regulations, respond to lawful requests from government or regulatory authorities, and enforce our legal rights.
• Marketing and Communications: To send you product updates, newsletters, and promotional offers — but only where you have opted in or where we have a legitimate interest to do so. You may opt out at any time.

5. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing personal data, we rely on the following:

• Contract Performance: Processing necessary to enter into or perform our contract with you (e.g., delivering the services you subscribed to).
• Legal Obligation: Processing required to comply with applicable Nigerian law (e.g., FIRS requirements, NDPR obligations, CBN regulations).
• Legitimate Interests: Processing in pursuit of our legitimate business interests, where such interests are not overridden by your rights (e.g., improving the Platform, fraud prevention, direct marketing to existing customers).
• Consent: Where you have given clear consent, such as for receiving marketing emails or for the use of optional cookies. You may withdraw consent at any time.

6. Disclosure of Your Information

We do not sell your personal data to any third party. We may share your information in the following limited circumstances:

6.1 Service Providers

We engage carefully selected third-party service providers who act as Data Processors on our behalf to help us deliver our services. These include cloud infrastructure providers, payment processors, email delivery services, and customer support tools. All such providers are contractually obligated to process data only on our instructions and in compliance with applicable data protection law.

6.2 Legal Requirements

We may disclose your information to regulatory authorities, law enforcement agencies, or courts where required by applicable law, including the NDPR, NDPA, FIRS regulations, or where we are compelled by a valid court order or lawful governmental request.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of BizSoft's business or assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections. We will notify you before your data is subject to a different privacy policy.

6.4 Protection of Rights

We may disclose information where we believe, in good faith, that disclosure is necessary to protect BizSoft's rights, investigate fraud, or respond to a safety emergency.

6.5 With Your Consent

We may share your data with third parties where you have explicitly consented to such sharing.

7. International Data Transfers

BizSoft is primarily based in Nigeria and our Platform is hosted on cloud infrastructure which may be located in Nigeria or other countries. If we transfer your personal data outside Nigeria, we will ensure that appropriate safeguards are in place to protect your data in accordance with the NDPR and NDPA, including:

• Transferring data only to countries that provide an adequate level of data protection;
• Implementing standard contractual clauses or equivalent data transfer mechanisms; or
• Ensuring our service providers maintain appropriate technical and organisational security measures.

For information about the safeguards applicable to your data, please contact our DPO at legal@bizsoft.com.ng.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

Specifically:

• Active Account Data: Retained for the duration of your subscription and for 2 (two) years thereafter, unless you request earlier deletion.
• Financial and Billing Records: Retained for a minimum of 7 (seven) years in compliance with Nigerian tax and accounting laws, even after account closure.
• Support and Communication Records: Retained for 3 (three) years after the last interaction.
• Legal Claims Data: Retained for the duration of any dispute or legal proceedings plus the applicable limitation period under Nigerian law.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you.

9. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• Transport Layer Security (TLS 1.3) encryption for all data in transit;
• AES-256 encryption for data at rest;
• Role-based access controls and the principle of least privilege;
• Multi-factor authentication options for user accounts;
• Regular security audits and vulnerability assessments;
• Daily automated backups with geographic redundancy;
• Comprehensive audit trails for all data access and modification events; and
• Staff training on data security and handling obligations.

While we take all reasonable steps to protect your data, no system is completely secure. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with our obligations under applicable law.

10. Your Rights as a Data Subject

Under the NDPR, NDPA, and (where applicable) the GDPR, you have the following rights with respect to your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent. Note that we may be required to retain certain data to comply with legal obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances.
• Right to Data Portability: You may request a machine-readable copy of your personal data to transfer to another service provider.
• Right to Object: You have the right to object to processing of your data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right Not to be Subject to Automated Decision-Making: You have the right not to be subject to decisions made solely by automated processing that significantly affect you, without human review.

To exercise any of these rights, please contact our Data Protection Officer at legal@bizsoft.com.ng. We will respond to your request within 30 (thirty) days of receipt. We may need to verify your identity before processing your request. Requests relating to account deletion may also be submitted via our Account Deletion Request page.

11. Cookies and Tracking Technologies

11.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function efficiently and to provide information to the website operators.

11.2 How We Use Cookies

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable core features such as user authentication, session management, and security. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences (e.g., language, display settings) to provide a more personalised experience.
• Analytics Cookies: Help us understand how visitors interact with our Platform, so we can improve performance and user experience. Analytics data is aggregated and anonymised where possible.
• Marketing Cookies: Used to deliver relevant advertising to you on third-party platforms. These are only activated with your explicit consent.

11.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing ones. However, disabling strictly necessary cookies may impair the functionality of the Platform. For more information about managing cookies, please visit www.allaboutcookies.org.

12. Children's Privacy

The Platform is intended solely for use by individuals aged 18 years and above, representing legitimate business entities. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has provided us with personal data without appropriate parental or guardian consent, please contact us immediately at legal@bizsoft.com.ng and we will take prompt steps to delete such information from our systems.

13. Links to Third-Party Websites

Our Platform and website may contain links to third-party websites, services, or resources. These links are provided for your convenience only. BizSoft does not control and is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit. Access to third-party sites is entirely at your own risk.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email to your registered address and by posting the updated Policy on our website, at least 14 (fourteen) days before the changes take effect. The "Last Updated" date at the top of this Policy will always reflect the most recent revision.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Policy. If you do not agree with any changes, you must stop using the Platform and, if you wish, request deletion of your account and data.

15. Contact Us and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact our Data Protection Officer (DPO):

• Email (DPO): legal@bizsoft.com.ng
• General Support: support@bizsoft.com.ng
• Account Deletion Requests: Submit via our dedicated page

We are committed to resolving all data protection concerns in a timely and transparent manner. We aim to respond to all valid requests within 30 (thirty) calendar days.

16. Filing a Complaint

If you are not satisfied with our response to your data protection concern, you have the right to lodge a complaint with the relevant supervisory authority:

• Nigeria National Information Technology Development Agency (NITDA): The designated authority for data protection matters in Nigeria under the NDPR and NDPA. Website: nitda.gov.ng
• Nigeria Data Protection Commission (NDPC): The national body responsible for data protection oversight under the NDPA 2023.

Where applicable data protection law requires, you also have the right to seek judicial redress.

---

© BizSoft Technologies Limited. All rights reserved. This Privacy Policy was last updated on 26 August 2026.