InvoizaPro Privacy Policy

1. Introduction

TheByteCodes Global Solution (trading as "InvoizaPro", "We", "Us", or "Our") is committed to protecting the privacy and security of your Personal Data. This Privacy Policy describes how we collect, use, store, share, and protect your information when you use our website, mobile applications, APIs, and related services (collectively, the "Services").

This Policy has been updated to ensure compliance with the Nigeria Data Protection Act 2023 (NDPA) and aligns with global standards such as the General Data Protection Regulation (GDPR).

By accessing or using the Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree with this Policy, please discontinue use of the Services immediately.

2. Definitions

• Personal Data means any information relating to an identified or identifiable natural person.
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, duration of a page visit).
• Data Controller means the natural or legal person who, alone or jointly with others, determines the purposes for which and the manner in which any personal information is, or is to be, processed.
• Data Processor means any natural or legal person who processes data on behalf of the Data Controller.

3. Data We Collect

We collect information to provide better services to all our users. The types of data we collect include:

3.1 Data You Provide to Us

• Account Information: When you register, we collect Personal Data such as your full name, email address, phone number, business name, Tax Identification Number (TIN), and password.
• Financial Data: To process transactions, we may collect billing details. We do not store sensitive cardholder data (such as PAN or CVV). All payment processing is handled by PCI-DSS compliant third-party payment processors.
• Support Data: Information you provide when you contact our customer support, including chat transcripts and email correspondence.

3.2 Data Collected Automatically

• System Data: Technical data about your device, including IP address, device type, operating system, unique device identifiers, and browser type.
• Usage Data: Information on how you interact with our Services, such as features used, time spent on pages, click data, and crash logs.
• Location Data: Approximate geographic location calculated based on your IP address.

3.3 Data from Third Parties

• Social Media Platforms: If you choose to link, connect, or log in to our Services via a third-party platform (for example, Google or LinkedIn).
• Partners: Tax practitioners, auditors, or financial institutions that facilitate your use of our Services may provide data about you.

4. Legal Basis for Processing

We process your Personal Data under the following legal bases, in compliance with NDPA and GDPR:

• Performance of a Contract: To provide the Services you have subscribed to and manage your account.
• Legitimate Interests: To improve our Services, detect fraud, and ensure network security, provided these interests are not overridden by your data protection rights.
• Compliance with Legal Obligations: To comply with tax laws, anti-money laundering (AML) regulations, and requests from law enforcement or the Federal Inland Revenue Service (FIRS).
• Consent: Where you have given explicit consent for specific processing activities (such as marketing communications). You may withdraw this consent at any time.

5. How We Use Your Data

We use the collected data for the following purposes:

• Service Provision: To operate, maintain, and provide the features of the InvoizaPro Platform.
• Transaction Processing: To facilitate billing, invoicing, and tax compliance reporting.
• Communication: To send administrative information, such as updates to terms, security alerts, and responses to support requests.
• Marketing: To provide you with news, special offers, and information about goods, services, and events (subject to your opt-out rights).
• Security and Fraud Prevention: To verify identity, detect and prevent fraud, and ensure the integrity of our platform.
• Analytics: To monitor usage trends and improve user experience.

6. Disclosure of Personal Data

We do not sell your Personal Data. We may share your information in the following circumstances:

6.1 Service Providers

We engage third-party companies to facilitate our Services ("Data Processors"), including:

• Payment processors.
• Cloud hosting services (for example, AWS or Azure).
• Analytics providers (for example, Google Analytics).
• Customer support tools.

These parties have access to your Personal Data only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

6.2 Legal and Regulatory Authorities

We may disclose your Personal Data to the Federal Inland Revenue Service (FIRS) or other tax authorities as required to facilitate tax compliance and reporting on your behalf. We may also disclose data if required by law or in response to valid requests by public authorities (such as a court or government agency).

6.3 Business Transfers

If InvoizaPro is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data becomes subject to a different Privacy Policy.

7. Cross-Border Data Transfers

Your information, including Personal Data, may be transferred to and maintained on computers located outside your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

InvoizaPro ensures that such transfers are compliant with the Nigeria Data Protection Act 2023. If we transfer data outside Nigeria to a foreign country, we ensure adequate safeguards are in place, such as:

• Transferring to countries with an adequacy decision from the Nigeria Data Protection Commission (NDPC).
• Implementing Standard Contractual Clauses (SCCs) or Binding Corporate Rules (BCRs) with the recipient to ensure the security of your data.

8. Data Security

We employ industry-standard physical, technical, and administrative security measures to protect your data, including encryption (SSL/TLS), firewalls, and access controls. However, no method of transmission over the Internet or method of electronic storage is 100 percent secure.

While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your password and account details, and you should notify us immediately of any unauthorized use of your account.

9. Data Retention

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.

• Account Data: Retained for the lifetime of your account plus a period thereafter to comply with legal obligations (for example, tax laws may require retaining records for six or more years).
• Usage Data: Retained for a shorter period for internal analysis purposes.

Upon expiration of the retention period, your data will be securely deleted or anonymized.

10. Your Data Rights

Under the NDPA and applicable international laws, you have the following rights:

• Right to Access: Request copies of the Personal Data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): Request deletion of your Personal Data, subject to our legal retention obligations.
• Right to Restriction: Request that we restrict the processing of your Personal Data.
• Right to Data Portability: Request transfer of your data to another organization or directly to you.
• Right to Withdraw Consent: Withdraw consent at any time where we rely on consent to process your Personal Data.

To exercise these rights, please contact us at support@thebytecodes.com.ng. We may require identity verification before responding to your request.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our Services and store certain information.

11.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function (for example, session login).
• Preference Cookies: Remember your settings and preferences (for example, language).
• Analytics Cookies: Help us understand how visitors interact with the website (for example, Google Analytics).
• Advertising Cookies: Used to deliver advertisements relevant to you.

11.2 Your Cookie Choices

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

• Google Analytics Opt-out
• General Cookie Management (allaboutcookies.org)

12. Children's Privacy

Our Services are not intended for use by children under the age of 18 (a "Minor"). We do not knowingly collect personally identifiable information from Minors. If you are a parent or guardian and you become aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from Minors without verification of parental consent, we will take steps to remove that information from our servers.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Contact Us

If you have any questions, concerns, or disputes regarding this Privacy Policy, or wish to exercise your data rights, please contact our Data Protection Officer (DPO):