Privacy Policy

For business owners' own account data (your name, login, business details, billing), Cliently is the data controller.

For the customer data a business adds to Cliently (its clients' names, contacts, bookings, invoices, files), the business is the data controller and Cliently acts as a data processor on that business's behalf. If you are a customer of a business that uses Cliently, please contact that business about your data; we will support them in responding.

a. Account & business information: name, email, phone/WhatsApp number, a hashed password, business name, category, description, address, working hours, logo and images, and social links you add.

b. Identity & compliance (KYC): to enable payouts we verify your identity (NIN) and, optionally, business registration (CAC/RC number) through our verification partner. This is required by payment regulations before a bank account can receive funds.

c. Payment & payout information: bank account details for payouts and records of transactions (amounts, references, status). Card and bank-transfer payments are processed by our payment provider (Paystack); we do not store full card numbers.

d. Customer data you add: information a business enters about its own clients — names, emails, phone numbers, bookings, invoices, quotes, payments and uploaded files.

e. Content & communications: content you publish on your Cliently page, messages and notifications we send on your behalf, reviews, and your conversations with our AI assistant (Amara).

f. Usage & device data: log data, IP address, device and browser information, pages viewed and actions taken, collected via cookies and similar technologies (see our Cookie Policy).

• Provide, operate and maintain the Service and your account.
• Process payments and settle payouts to your bank account.
• Verify identity and business registration (KYC/anti-fraud), and meet legal obligations.
• Send transactional messages (invoices, receipts, reminders, booking and payment alerts) by email, WhatsApp and app/push notifications, and, with consent, marketing.
• Power the Amara AI assistant using your business's own data to give tailored help.
• Protect the Service — security, fraud prevention, rate-limiting and abuse detection.
• Analyse and improve the Service, and provide support.

We rely on: performance of a contract (to provide the Service you signed up for); legal obligation (KYC, tax, anti-fraud); consent (for analytics/marketing cookies and marketing messages, which you can withdraw at any time); and legitimate interests (securing and improving the Service), balanced against your rights.

We do not sell your personal data. We share it only with service providers who process it on our instructions to run the Service:

• Supabase — secure database, authentication and file storage.
• Paystack — payment processing and payouts.
• Identity verification partner (Prembly) — NIN/CAC verification.
• Resend — sending transactional email.
• Meta (WhatsApp Business Platform) — sending WhatsApp invoices/reminders.
• Google Firebase (Cloud Messaging) — app/push notifications.
• OpenAI — powering the Amara assistant (see section 6).
• Sentry — error monitoring; Tawk.to — support chat.
• Cloudflare Turnstile — bot/abuse protection; our hosting provider.
• Facebook & TikTok pixels — where a business enables them on its public page; these are set by that business, which is responsible for its own use of them.

We may also disclose data where required by law, to enforce our Terms, or to protect rights, safety and the integrity of the Service. Some providers are outside Nigeria; where data is transferred internationally we take steps to ensure an adequate level of protection.

When you use Amara, we send your question and an aggregated snapshot of your business data (e.g. revenue trends, outstanding invoices, client names relevant to your request) to OpenAI to generate a response. Your conversations are stored so Amara can remember context and follow up. Data sent through the OpenAI API is not used to train their models. Amara provides general business assistance only and not legal, tax, accounting or other professional advice.

We keep personal data for as long as your account is active and as needed to provide the Service. Transaction and compliance records are kept for the periods required by financial and tax law. When you delete your account, we delete or anonymise your data within a reasonable period, except where we must retain certain records to meet legal obligations.

We use encryption in transit, hashed passwords, optional two-factor authentication, row-level access controls, signed tokens and timing-safe checks for sensitive operations, and rate-limiting. No system is perfectly secure, but we work continuously to protect your data and will notify you and the regulator of a breach where the law requires.

Subject to the NDPA, you may request to access, correct, delete, restrict or object to the processing of your personal data, receive a copy in a portable format, and withdraw consent. You can update most information in your account settings, delete your account from Settings → Danger Zone, and change cookie choices via our Cookie Policy page. To exercise other rights, contact us using the details below. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

The Service is intended for businesses and people aged 18 and over. We do not knowingly collect data from children.

We may update this policy from time to time. Material changes will be posted here with an updated date, and where appropriate we will notify you.

For privacy questions or to exercise your rights, reach us through the in-app support chat or your account's support options. Cliently is operated by Lytronet Limited.