FrontStaff

Privacy Policy

Last updated: June 23, 2026

FrontStaff Technologies Limited ("FrontStaff", "we", "us", or "our") operates the FrontStaff platform, which enables businesses to deploy AI-powered customer assistants. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, in compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023.

1. Information We Collect

1.1 Information You Provide

  • Account information: Name, email address, phone number, and business details when you register.
  • Business content: Documents, FAQs, product listings, and website URLs you upload to train your AI assistant.
  • Payment information: Billing details processed securely by Paystack or Flutterwave. We do not store card numbers.
  • Communications: Messages you send to our support team.

1.2 Information Collected Automatically

  • Usage data: Pages visited, features used, session duration, and interaction patterns.
  • Device data: IP address, browser type, operating system, and device identifiers.
  • Conversation data: Messages exchanged between your customers and your AI assistant, stored for up to 90 days per NDPR requirements.
  • Cookies and tracking: Session cookies essential for platform operation. See Section 8 for details.

1.3 Customer Data

When visitors interact with your AI assistant deployed on the FrontStaff platform, we process their conversation data on your behalf as a data processor. You, as the tenant, are the data controller for your customers' data.

2. How We Use Your Information

  • Provision and improvement of the FrontStaff platform and services.
  • Processing payments and managing subscriptions.
  • Training and improving AI assistant accuracy using your business content.
  • Sending service notifications, invoices, and renewal reminders.
  • Responding to support inquiries and resolving disputes.
  • Complying with legal obligations under Nigerian law.
  • Detecting fraud and ensuring platform security.

3. Legal Basis for Processing

Under the NDPR and NDPA 2023, we process your personal data on the following lawful bases:

  • Contract performance: Processing necessary to provide services you have subscribed to.
  • Legitimate interests: Security monitoring, fraud prevention, and service improvement.
  • Legal obligation: Compliance with Nigerian tax, financial, and data protection laws.
  • Consent: Marketing communications, where you have opted in.

4. Information Sharing

We do not sell your personal data. We share data only in the following circumstances:

  • Service providers: Sub-processors who help us operate the platform (cloud hosting, payment gateways, email delivery). All sub-processors are bound by data processing agreements.
  • Legal requirements: When required by Nigerian law, court order, or government authority.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.
  • With your consent: For any other purpose with your explicit agreement.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specific retention periods:

  • Account data: Retained for the duration of your subscription plus 7 years (for tax and legal purposes).
  • Conversation/message data: Automatically deleted after 90 days per NDPR Section 2.1(3).
  • Payment records: Retained for 7 years per Nigeria Finance Act requirements.
  • Audit logs: Retained for 3 years.

Upon account deletion, we will purge your personal data within 30 days, except where retention is required by law.

6. Your Rights

Under the NDPR and NDPA 2023, you have the following rights:

  • Right of access: Request a copy of your personal data we hold.
  • Right to rectification: Correct inaccurate or incomplete data.
  • Right to erasure: Request deletion of your personal data (subject to legal retention obligations).
  • Right to data portability: Receive your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise your rights, email our Data Protection Officer at [email protected] or use the data deletion form at /privacy/delete-form. We will respond within 30 days.

7. Security

We implement industry-standard security measures including:

  • Encryption in transit (TLS 1.3) and at rest (AES-256).
  • Role-based access controls and audit logging for all administrative actions.
  • Regular security assessments and penetration testing.
  • Incident response procedures with notification to NITDA within 72 hours of a confirmed breach.

8. Cookies

We use only essential cookies required for platform operation (authentication session tokens). We do not use third-party advertising or tracking cookies. You may disable cookies in your browser settings, but this will prevent you from logging in.

9. Children's Privacy

FrontStaff is not directed at children under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately.

10. Cross-Border Data Transfers

Your data is primarily stored on servers located within the EU and/or United States. Any transfer outside Nigeria is conducted in accordance with NDPR Article 2.11 and subject to appropriate safeguards including Standard Contractual Clauses.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email at least 30 days before they take effect. Continued use of the platform after the effective date constitutes acceptance.

12. Contact and Data Protection Officer

For any privacy-related inquiries, requests, or complaints:

  • Email: [email protected]
  • Address: FrontStaff Technologies Limited, Lagos, Nigeria
  • NITDA registration: [Registration number upon completion]

You also have the right to lodge a complaint with the National Information Technology Development Agency (NITDA) at nitda.gov.ng.

Last updated: 23 June 2026