At NaijaLawBot ("we", "our", or "us"), we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our services (the "Platform"), in compliance with the Nigeria Data Protection Act (NDPA) 2023 and other relevant regulations.
1. Data Controller
NaijaLawBot acts as the Data Controller for the personal information you provide. If you have any questions about this policy, please contact our Data Protection Officer (DPO) at privacy@naijalawbot.com.
2. Information We Collect
We collect and process the following types of data:
- Personal Identification Data:Name, email address, phone number (if provided during signup).
- Usage Data: Chat logs, query history, IP addresses, browser type, and device information.
- Technical Data: Cookies and similar tracking technologies (see our Cookie Policy).
3. Purpose of Processing
We process your data for the following lawful purposes under the NDPA:
- Service Delivery: To provide AI-generated legal insights and answer your queries.
- Improvement: To train our AI models and improve the accuracy of Nigerian legal contexts (anonymized data only).
- Communication: To send service updates, security alerts, and support messages.
- Compliance: To verify identity and prevent fraud as required by Nigerian law.
4. Consent
By using NaijaLawBot, you explicitly consent to the processing of your data as described in this policy. You have the right to withdraw consent at any time by contacting us, though this may limit your access to certain features.
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law (e.g., for tax or legal proceedings).
6. Sharing of Data
We do not sell your personal data. We may share data with:
- Service Providers: Cloud hosting providers (e.g., AWS, Vercel) compliant with ISO 27001 standards.
- Legal Authorities: When required by a court order or to comply with the Cybercrimes (Prohibition, Prevention, etc.) Act 2015.
7. Rights of Data Subjects
Under the NDPA 2023, you have the right to:
- Request access to your personal data.
- Request correction of inaccurate data.
- Request deletion of your data ("Right to be Forgotten").
- Object to the processing of your data.
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
8. International Transfers
Your data may be processed on servers located outside Nigeria. We ensure strictly adequate safeguards are in place, such as Standard Contractual Clauses (SCCs), to protect your data in transit and at rest.
9. Changes to This Policy
We may update this policy to reflect changes in legal or operational requirements. We will notify you of significant changes via email or a prominent notice on our Platform.
10. Contact Us
For any privacy-related inquiries, please contact:
Email: privacy@naijalawbot.com
Address: Lagos, Nigeria.