Privacy Policy
Last updated: January 7, 2026
We are committed to protecting your privacy and ensuring the security of your personal and business data. This policy explains how we collect, use, and safeguard your information.
Overview
This Privacy Policy explains how WAZOBIA-Books ("WAZOBIA-Books", "we", "us", "our") collects, uses, discloses, and protects personal data and business data when you visit our website, create an account, or use our accounting software platform (the "Service").
Data Ownership
You own your business data. We process it solely to provide the Service and never sell it to third parties.
Finance-Grade Security
We maintain comprehensive audit logs for all key actions to support accountability, compliance, and financial integrity.
Definitions
- Personal Data
- Information relating to an identified or identifiable individual, such as name, email address, or IP address.
- Business Data
- Accounting and operational data entered into the Service, including invoices, payroll records, ledger entries, customer information, and financial reports.
- Account Owner
- The person or entity that controls a business workspace in WAZOBIA-Books and has administrative privileges.
- Subprocessor
- A third-party service provider that processes data on our behalf, such as hosting providers, database services, storage solutions, and email delivery services.
Who We Are
The Service is provided by WAZOBIA Smartech Ltd, a technology company operating from Kano, Lagos, & Abuja, Nigeria.
For privacy-related inquiries, data subject requests, or questions about this policy, please contact us at: admin@wazobia-books.ng
Information We Collect
Account Information
- Names and email address
- Authentication and security information (e.g., password hashes, 2FA configuration)
- Login history and security events (timestamps, IP addresses, device details)
- Account preferences and settings
Business and Financial Information (Business Data)
- Business profile, company name, address, tax identification numbers
- Customers, vendors, products, inventory, purchase orders, bills, expenses
- Invoices, payments, credit notes, recurring transactions
- Payroll data (employees, payroll periods, payslips, statutory deductions)
- Ledger data (chart of accounts, journal entries, financial reports)
- Bank account information and transaction records
Usage and Technical Information
- Request logs and operational telemetry (including request IDs for debugging)
- Basic device and browser information for compatibility and security purposes
- Crash and error reports (if enabled by you)
- Feature usage statistics to improve service quality
How We Use Information
Service Delivery
Provide features such as invoicing, payroll processing, financial reports, and data exports.
Security
Protect accounts, prevent abuse, detect fraud, and enforce access controls.
Support
Troubleshoot issues, respond to support requests, and provide customer assistance.
Reliability
Monitor performance, diagnose errors, improve stability, and ensure uptime.
Auditability
Maintain audit logs for sensitive actions and financial changes for compliance.
Improvements
Analyze usage patterns to enhance features and user experience (anonymized where possible).
Legal Bases for Processing
Where applicable under data protection laws (including NDPR and GDPR), we process Personal Data on one or more of the following legal bases:
- Contract Performance: Processing necessary to provide the Service under our Terms of Service.
- Legitimate Interests: Security, fraud prevention, service improvement, and business operations.
- Legal Obligations: Compliance with applicable laws, regulations, and court orders.
- Consent: Where you have provided explicit consent for specific processing activities.
Security Measures
We implement industry-standard security measures designed to protect your data:
Note: While we implement robust security measures, no system can be guaranteed 100% secure. We continuously work to improve our security posture.
Data Retention
Active Accounts
We retain account data while your account is active and as needed to provide the Service. You can request deletion of your account at any time.
Audit Logs & Financial Records
We may retain audit logs and financial records for extended periods to support integrity, compliance with accounting standards, tax regulations, and dispute resolution.
Backups
Backups exported to your Azure Blob container are retained according to your configured retention policy. We maintain our own backups for disaster recovery purposes.
Account Deletion
Upon account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., financial records).
Your Rights
Depending on your jurisdiction (including NDPR in Nigeria and GDPR in the EU), you may have the following rights:
Right to Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of your data (subject to legal requirements)
Right to Restrict Processing
Limit how we process your data
Right to Data Portability
Receive your data in a structured format
Right to Object
Object to certain processing activities
Right to Withdraw Consent
Withdraw consent where processing is based on consent
Right to Complain
Lodge a complaint with a data protection authority
To exercise any of these rights, please contact us at admin@wazobia-books.ng. We will respond to your request within 30 days.
International Data Transfers
Our service providers may process data in multiple regions, including outside Nigeria and the European Economic Area (EEA). Where required by law, we implement appropriate safeguards to support lawful cross-border transfers, including:
- Standard contractual clauses approved by data protection authorities
- Certification schemes and codes of conduct
- Binding corporate rules where applicable
- Other legal mechanisms recognized by applicable data protection laws
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. We will notify you of any material changes by:
- Posting the updated policy on this page with a new "Last updated" date
- Sending an email notification to registered users (for significant changes)
- Displaying a notice on the Service (for major changes)
Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We aim to respond to all privacy-related inquiries within 30 days.