Your privacy matters to us
Effective Date: March 12, 2026
Navolet (“we”, “our”, or “us”) is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under applicable data protection laws including the Nigeria Data Protection Act (NDPA) 2023 and where applicable, the EU General Data Protection Regulation (GDPR).
By using Navolet — including our WhatsApp bot, Telegram bot, and website — you agree to the collection and use of information as described in this policy.
1. Who We Are
Navolet is a business management assistant platform that allows small and medium-sized businesses to manage invoices, customers, inventory, sales and expenses through WhatsApp and Telegram bots.
Data Controller: Navolet
Contact: privacy@navolet.com
Website: navolet.com
2. What Data We Collect
2.1 Data You Provide
- Your phone number or Telegram chat ID (used as your account identifier)
- Business name, address, and banking details (provided during onboarding)
- Customer names, phone numbers, and email addresses you add to the bot
- Invoice details, product names, prices, and transaction records
- Expense descriptions and amounts
- Stock/inventory information
2.2 Data Collected Automatically
- Message content you send to the bot (processed to understand your commands)
- Timestamps of messages and transactions
- Platform used (WhatsApp or Telegram)
- Subscription plan and usage counts
2.3 Data We Do NOT Collect
- We do not collect payment card numbers or bank account credentials
- We do not access your WhatsApp or Telegram contacts list
- We do not read messages from other chats — only messages sent directly to our bot
- We do not collect location data
3. How We Use Your Data
We use your data only for the following purposes:
- To provide the bot service — process your commands, generate invoices, track inventory
- To personalise your experience — remember your business name, currency, and preferences
- To send daily business reports to you via the bot
- To manage your subscription and license key activation
- To respond to support requests
- To comply with legal obligations
Legal basis for processing (NDPA/GDPR): Contract performance, legitimate interests, and legal obligation.
4. How We Store Your Data
- Your data is stored in a secure database on our servers.
- All communication between your bot and our servers is encrypted using HTTPS/TLS.
- We retain your data for as long as your account is active.
- If you request account deletion, your data is permanently deleted within 30 days.
- We do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Data Sharing
We share your data only with:
- OpenAI (USA) — your messages are sent to OpenAI’s API to process natural language commands. OpenAI processes messages per their Data Processing Agreement and does not use API data to train models. See openai.com/policies.
- Meta (WhatsApp) — messages are delivered via Meta’s Cloud API. See Meta’s privacy policy.
- Telegram — messages are delivered via Telegram’s Bot API. See Telegram’s privacy policy.
- Our hosting provider — for infrastructure purposes only, under confidentiality agreements.
We will never sell your data to advertisers or data brokers.
6. Your Rights
Under the Nigeria Data Protection Act 2023 and GDPR (where applicable), you have the right to:
- Access — request a copy of all personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure (“right to be forgotten”) — request deletion of all your data
- Portability — receive your data in a machine-readable format
- Restriction — ask us to stop processing your data in certain circumstances
- Objection — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent
To exercise any of these rights, visit navolet.com/data-request or send a message to our bot saying “DELETE MY DATA” or “EXPORT MY DATA”.
We will respond within 30 days of receiving your request.
7. Cookies
Our website at navolet.com may use essential cookies for functionality. We do not use advertising or tracking cookies. The bot itself does not use cookies.
8. Children’s Privacy
Navolet is not intended for use by persons under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at privacy@navolet.com and we will delete it immediately.
9. International Data Transfers
Your data may be processed by our third-party service providers (OpenAI, hosting providers) outside Nigeria. Where this occurs, we ensure appropriate safeguards are in place including standard contractual clauses.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you via the bot when significant changes are made. Continued use of the service after changes constitutes acceptance.
11. Contact Us
For any privacy concerns or data requests:
- Email: privacy@navolet.com
- Website: navolet.com/data-request
- Via the bot: Send “PRIVACY” to get this information, or “DELETE MY DATA” to request deletion