Privacy Policy

Shopa is a Software-as-a-Service (SaaS) platform operated by Shopa Technologies Limited, a company registered in Nigeria. Our registered address is Lagos, Nigeria. We provide WhatsApp-powered commerce automation tools to small and medium-sized businesses across Nigeria and West Africa.

If you have questions about this policy, contact us at privacy@shopa.ng.

We collect the following categories of information:

Account Information — Your name, email address, phone number, and business details when you create an account or complete onboarding.

Business Data — Product listings, inventory records, order history, customer contacts, and pricing information you upload or create on the platform.

Payment Information — Billing details and transaction records processed through our payment partners (Paystack, Flutterwave). We do not store full card numbers on our servers.

WhatsApp Data — Messages exchanged between your WhatsApp bot and your customers, solely for the purpose of fulfilling orders and providing the service.

Usage Data — Pages visited, features used, session duration, device type, IP address, and browser information, collected automatically via cookies and analytics tools.

Communications — Any messages or support requests you send to us.

We use your information to:

• Provide, operate, and improve the Shopa platform
• Process your subscription payments and issue receipts
• Send you service-critical notifications (downtime, billing alerts)
• Respond to support requests and account inquiries
• Detect and prevent fraud, abuse, or violations of our Terms
• Comply with applicable Nigerian laws and regulations, including the Nigeria Data Protection Act (NDPA) 2023
• Send you product updates or promotional content (you may opt out at any time)

We process your personal data under the following lawful bases as defined by the Nigeria Data Protection Act (NDPA) 2023:

• Contract performance — to deliver the services you have subscribed to
• Legitimate interests — to improve our platform, prevent fraud, and ensure security
• Legal obligation — to comply with applicable Nigerian laws and regulatory requirements
• Consent — for marketing communications, which you may withdraw at any time

We do not sell your personal data. We share data only with:

• Payment processors (Paystack, Flutterwave) to handle subscription billing
• Cloud infrastructure providers (Supabase, Cloudinary) for secure data storage and media hosting
• Analytics providers to understand platform usage in aggregate
• Law enforcement or regulatory authorities when required by Nigerian law

All third-party partners are bound by data processing agreements and are required to protect your data.

We retain your account data for as long as your subscription is active, plus a period of 12 months after account closure to resolve any outstanding disputes or comply with legal obligations. Transaction records may be retained for up to 7 years as required by Nigerian financial regulations.

You may request deletion of your data at any time by contacting privacy@shopa.ng. Deletion requests are processed within 30 days.

We implement industry-standard safeguards to protect your data, including:

• End-to-end HTTPS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Role-based access controls limiting staff access to customer data
• Regular security audits and vulnerability assessments

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Under the Nigeria Data Protection Act (NDPA) 2023, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request that inaccurate data be updated
• Deletion — request that your data be erased, subject to legal retention requirements
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — for any processing based on consent (e.g., marketing emails)

To exercise any of these rights, email privacy@shopa.ng. We will respond within 30 days.

We use essential cookies to keep you logged in and remember your preferences. We also use analytics cookies to understand how the platform is used. You can disable non-essential cookies in your browser settings, though this may affect some platform features.

Shopa is intended for business owners and is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us at privacy@shopa.ng and we will promptly delete the account.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and display a notice in the platform dashboard at least 14 days before the changes take effect. Continued use of Shopa after that date constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your rights:

Email: privacy@shopa.ng Address: Shopa Technologies Limited, Lagos, Nigeria

For general support: support@shopa.ng