How to request, manage, and delete your data

Effective Date: March 12, 2026

This document explains exactly what data Navolet holds about you, how you can request access or deletion, and how we process such requests. This policy complies with the Nigeria Data Protection Act (NDPA) 2023.

1. What Data We Hold About You

If you have used the Navolet bot, we may hold the following data associated with your account:

• Your phone number or Telegram chat ID
• Your business name, address, currency preference, and bank details
• Customer records you have added (names, phone numbers, email addresses, balances)
• Invoice records and invoice line items
• Sales records
• Expense records
• Credit/debt records
• Stock/inventory records
• Your subscription plan and license key
• Message count and usage statistics
• Timestamps of all records

2. Your Rights

You have the following rights regarding your data:

• Right to Access: Receive a full export of all data we hold about you in a readable format.
• Right to Erasure: Request permanent deletion of all your data from our systems.
• Right to Rectification: Ask us to correct inaccurate data.
• Right to Portability: Receive your data in a structured, machine-readable format.

3. How to Submit a Data Request

You have three ways to request your data or deletion:

Option A — Through the Bot (Fastest)

Send one of these exact commands to the Navolet bot on WhatsApp or Telegram:

• “DELETE MY DATA” — permanently delete your account and all associated data
• “EXPORT MY DATA” — receive a summary of all data we hold about you
• “MY PRIVACY RIGHTS” — get a summary of your rights and this policy

The bot will ask you to confirm before taking any irreversible action.

Option B — Through the Website

Visit navolet.com/data-request and fill in the Data Request Form. You will need to provide:

• Your full name
• Your phone number (as registered with the bot)
• Type of request: Access, Deletion, or Correction
• Brief description of your request

You will receive an email confirmation within 24 hours and a response within 30 days.

Option C — By Email

Send an email to privacy@navolet.com with subject line “Data Request — [Your Phone Number]”. Include:

• Your full name and phone number registered with the bot
• Type of request (access/deletion/correction)
• Any specific details about what you want

4. How We Process Your Request

Once we receive your request:

• Step 1: We verify your identity by confirming your phone number or sending a verification code.
• Step 2: We acknowledge receipt within 24 hours.
• Step 3: We process your request within 30 days (usually within 7 days for bot requests).
• Step 4: We notify you when the action is complete.

5. What Happens When You Delete Your Data

When a deletion request is processed:

• Your account record is permanently removed from our database.
• All your customer records are permanently deleted.
• All your invoices, sales, expenses, stock, and credit records are permanently deleted.
• Your business profile is permanently deleted.
• Your license key is deactivated and cannot be reused.
• Backups containing your data are overwritten within 30 days.

Note: We may retain certain data where required by law (e.g. financial transaction records may need to be retained for tax purposes for up to 7 years in some jurisdictions). We will inform you if this applies.

6. Data Retention After Account Closure

If you simply stop using the bot without requesting deletion:

• Your data is retained for 12 months of inactivity.
• After 12 months of inactivity, we will send you a notification (if possible) before deletion.
• After 18 months of inactivity, your data is automatically scheduled for deletion.

7. Response Timeframes

Request Type          Method          Timeframe

• Deletion via bot command — usually instant (within minutes)
• Deletion via website form — within 7 business days
• Deletion via email — within 30 days
• Data export via bot — usually within 24 hours
• Data export via email — within 30 days

8. Contact for Data Requests

• Email: privacy@navolet.com
• Website: navolet.com/data-request
• Via bot: Send “DELETE MY DATA” or “EXPORT MY DATA”

If you are not satisfied with our response to your data request, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.