Privacy Policy

Who is responsible for your data

Trust Bizbrada Solutions Limited, of 129 Iju Road, Ifako Ijaiye, Lagos, Nigeria, is the data controller for the personal data described here. We handle personal data in line with the Nigeria Data Protection Act 2023.

For anything in this policy — access, correction, deletion, a complaint — write to privacy@bizbrada.com.

What we collect

• Account details: your name, email address, phone number where you give it, and your password in hashed form.
• Business details: the business name, how it's registered, its home state, its financial year end, and tax identifiers such as a TIN where you enter them.
• The records you enter: sales, expenses, invoices, contacts, accounts, staff names and pay amounts entered for staff tax purposes, and the notes attached to them.
• Receipt images you photograph or upload, and the figures read from them.
• Device and sync information: the local database on your device, sync timestamps, pending-record counts and conflict history, so records can be reconciled across devices.
• Support messages you send us, including anything you attach.
• Basic technical logs — errors and request metadata — used to keep the service working.

Why we hold it, and on what basis

• To run the service you asked for: recording, reading, syncing, invoicing and calculating your tax positions. Basis: performance of our contract with you.
• To prepare and file returns where your plan includes it, and to answer a revenue authority on a filing you certified. Basis: performance of our contract, and legal obligation.
• To keep the service secure and to investigate misuse. Basis: our legitimate interest in a service that isn't abused.
• To send you account and filing messages — deadlines, confirmations, sign-in emails. Basis: performance of our contract.
• To send marketing, only where you've agreed. Basis: consent, which you can withdraw at any time.
• To meet accounting and tax record-keeping duties of our own. Basis: legal obligation.

Where your records live

BizBrada saves to a database on your device first. That local copy is what makes the app work with no connection, and it stays on the device until you sign out or switch business.

Records then sync to your workspace on our hosted database. We use managed cloud infrastructure, which may store and process data outside Nigeria; where that happens we rely on the transfer conditions permitted under the Nigeria Data Protection Act 2023 and require our providers to protect the data to the same standard.

Who can see your records

• You, and the people you invite into your workspace, at the level of access you give them.
• BizBrada staff, only where it's needed to prepare or review a filing you asked for, or to resolve a support issue you raised. Access is limited by role and recorded in your activity trail.
• A revenue authority, but only in a return you have read and certified, or where the law compels disclosure.
• Nobody else. We do not sell personal data, we do not share it with lenders or credit bureaux, and we do not use your records to advertise to you or to anyone else.

Who we rely on to run the service

We use a small number of providers, each handling data only on our instructions and only for their part of the job:

• Cloud hosting and database, to store your workspace and serve the app.
• Email delivery, to send sign-in, account and filing messages from our own domain.
• An AI text-extraction service, used only when you scan a receipt, to read the figures off the image.
• Payment processing for paid plans. Card details are handled by the payment provider; we never see or store them.

How long we keep it

Your records stay as long as your account is open. If you close it, we delete your workspace data within 90 days, except where we're required to keep something longer.

Filed returns and the records supporting them are kept for the statutory retention period under Nigerian tax law — commonly six years — because both you and we may need to produce them.

Backups roll off on their own schedule and are deleted in the ordinary course.

Your rights

Under the Nigeria Data Protection Act 2023 you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything inaccurate.
• Delete data where we no longer have a reason to keep it.
• Restrict or object to a particular use, including withdrawing consent to marketing.
• Give you your records in a portable form — you can also export them yourself from inside the app at any time.

How to exercise them, and how to complain

Write to privacy@bizbrada.com. We answer within 30 days. We may ask you to confirm who you are before we act, so records aren't handed to the wrong person.

If you're not satisfied with how we've handled it, you can complain to the Nigeria Data Protection Commission.

Security

Access to workspace data is controlled at the database level, so a workspace is only readable by its own members. Staff access is limited by role and logged.

No system is beyond reach. If a breach affects your personal data, we'll tell you and the regulator as the law requires, and we'll tell you plainly what happened rather than dressing it up.

Cookies and similar storage

We use storage on your device for two things: keeping you signed in, and holding your offline records. We don't use advertising cookies or third-party tracking pixels.

Children

BizBrada is for businesses and isn't intended for anyone under 18. We don't knowingly collect children's data. If you think we have, tell us and we'll remove it.

Changes to this policy

If we change how we handle your data in a way that affects you, we'll tell you by email or in the app before it takes effect. The date at the top shows when this version was published.