Privacy Policy

Welcome to InvoiceHack’s Privacy Policy page. Your privacy is of utmost importance to us. This Privacy Policy outlines how we collect, use, share, and protect your data in compliance with Nigeria’s Data Protection Act (NDPA) and the General Data Protection Regulation (GDPR). It also provides information about your rights and responsibilities as a data owner and our obligations as a data processor.

Information We Collect

We collect information to provide, maintain, and improve our services. The types of information we collect include:

How We Use Your Information

We process your data for the following purposes:

Information Sharing

We do not share personal information with companies, organizations, and individuals outside of invoicehack unless one of the following circumstances applies:

Data Protection and Security

We take reasonable measures to protect the information we collect from or about you from unauthorized access, use, or disclosure. However, no internet or email transmission is ever fully secure or error-free, so you should take special care in deciding what information you send to us in this way. We are committed to protecting your data and ensuring compliance with NDPA and GDPR standards.  Our measures include:

- Implementing technical and organizational safeguards to protect against unauthorized access, loss, or misuse of your data.

- Conducting regular security assessments and audits.

- Ensuring encryption of sensitive information where applicable.

Responsibilities of Data Owners:

As a data owner, you are responsible for ensuring that the data you provide is accurate, complete, and up-to-date. Please notify us promptly if there are changes to your information.

Cookies

Cookies are small files stored on your device that help us enhance your experience on our platform. We use cookies to:

You can manage your cookie preferences through your browser settings. However, disabling cookies may limit certain functionalities of our services.

Data Storage, Archival, and Deletion

We store your data securely on servers located in compliance with applicable data protection laws. Data is archived and retained only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, or resolve disputes. When data is no longer required, we:

Users can request the deletion of their personal data at any time, subject to legal and contractual requirements. Deleted data may still remain in backup systems for a limited period until it is overwritten or securely destroyed.

Your Rights as a Data Subject

Under the NDPA and GDPR, you have the following rights:

  • Access: You have the right to access your personal data and obtain a copy of it.

  • Correction: You can request corrections to inaccurate or incomplete data.

  • Erasure: You can request the deletion of your personal data under certain conditions.

  • Restriction: You can request restrictions on processing your data.

  • Data Portability: You can request your data in a structured, commonly used, and machine-readable format.

  • Objection: You can object to processing your data for certain purposes, such as direct marketing.

To exercise any of these rights, please contact us at [email protected]

Data Retention

We retain your data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, or resolve disputes. When your data is no longer required, we securely delete or anonymize it.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or other circumstances. Any updates will be posted on this page with the “last updated” date revised. Significant changes may be communicated through additional notifications.

Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or your data, please contact us:

Email: [email protected]