Privacy Policy

For the information about you and your team that we collect to run accounts and billing, we are the data controller. For the business content your team puts into the workspace (documents, project details, financial information, messages), you are the controller and we process it on your behalf to provide the service.

Contact: team@finnovateafrica.com.

• Account details: name, email address, a hashed (not readable) password, job title and phone number if you add them, and your role in a company.
• Company details: business name, industry, size, location, registration and tax numbers if you provide them, and the answers you give when profiling your business.
• Work you do in the service: requests, tasks, documents and files you upload, messages with your team and with Finnovate, meeting details, recordings you choose to make and their transcripts, and analytics inputs you enter.
• Payment information: payments are handled by Paystack. We keep the transaction reference, amount, status, the card type and last four digits, and an encrypted token that lets us renew your plan. We never see or store your full card number.
• Technical data: sign-in time, IP address and device/browser details for security and to show you your active sessions.
• Emails: we keep a record that service emails (sign-in codes, invitations, receipts, request updates) were sent.

• To create your account, sign you in and keep it secure, including two-factor authentication for Finnovate staff.
• To deliver the work you request and let your team collaborate.
• To take payment, renew your plan, send receipts and manage credits.
• To send you messages about your account, requests and billing. We do not send marketing email unless you ask for it.
• To prevent fraud and abuse, fix problems and improve the service.
• To meet legal obligations, such as tax and accounting records.

We rely on your contract with us (to provide the service), our legitimate interests (security, preventing abuse, improving the service), compliance with legal obligations, and your consent where we ask for it, for example before recording a meeting.

We do not sell personal data. We share it only with:

• Finnovate specialists assigned to your requests, who see what they need to do the work.
• Your own team, according to the roles your company admin sets.
• Service providers who help us run the service: cloud hosting and database providers; Paystack (payments); Resend (email); Google (Meet and Calendar for meetings); and OpenAI (AI insights, chat and speech-to-text for meeting transcripts). Each only receives what it needs and is bound to protect it.
• Authorities, where the law requires it.
• A buyer or successor, if Finnovate is ever sold or reorganised, who must honour this policy.

Some of our providers store or process data outside Nigeria. Where that happens we use providers that apply appropriate safeguards and we take steps to make sure your data stays protected to the standard Nigerian law requires.

• While your workspace is active, we keep your data so you can use it.
• Files you delete go to a trash and are permanently removed after 30 days.
• When a plan ends, the workspace stays read only for 30 to 90 days so you can export your work, and is then archived or deleted.
• We keep payment and invoice records for as long as tax and accounting law requires.
• You can ask us to delete your data sooner (see your rights below).

• Data is encrypted in transit. Uploaded files are served through expiring, signed links, and workspaces are separated so one company cannot see another's data.
• Access is limited by role, both for your team and for Finnovate staff. Staff must use two-factor authentication.
• Passwords are stored hashed, sign-in attempts are rate limited, and saved card tokens and authenticator secrets are encrypted.

Under Nigerian data protection law you can ask us to: tell you what personal data we hold about you and give you a copy; correct it; delete it; restrict or object to how we use it; and move it to another provider where that applies. You can also withdraw consent you gave us.

Email team@finnovateafrica.com and we will respond within a reasonable time, normally within 30 days. If you are not satisfied you can complain to the Nigeria Data Protection Commission.

We use only what is needed to keep you signed in and remember basic preferences on your device. We do not use advertising or cross-site tracking cookies.

The service is for businesses and is not intended for anyone under 18. We do not knowingly collect data from children.

We may update this policy. If a change is significant we will tell you in the app or by email. The date at the top shows when it was last updated.