01 Information we collect.
In short: what you give us (account, payment through Stripe, your knowledge), the chats your AI agent handles for you, and basic device and usage data.
We collect personal data in two ways.
Information you provide directly
- Identity & contact
- Name, email address, phone number, account credentials.
- Payment information
- Processed via Stripe. We do not store raw card numbers.
- Knowledge base
- Documents, FAQs, and policies you upload to train your AI assistant.
- Support & feedback
- Messages, reviews, and service interaction records.
Information collected automatically
- Device & environment
- IP address, browser type, operating system, device identifiers. When you sign up, we use your IP address to look up your country.
- Usage analytics
- Page visits, session duration, feature usage, crash logs (analytics consent required).
- Cookies & tracking
- See our Cookies page for full details.
Chats your AI agent handles
When people chat with your AI agent on your website, Telegram or Discord, we process their messages, and any email address they leave to reach a person, to answer them on your behalf. For Web3 projects, this can include a wallet address a member chooses to verify.
02 Purpose and lawful basis for each type of processing.
In short: most of it is needed to run the service you signed up for; analytics and the newsletter only happen with your consent.
Under the NDPA 2023, we must state the lawful basis for each purpose for which we process personal data. The table below sets this out clearly.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Create and manage your account | Identity, contact | Contract |
| Process payments and manage subscriptions | Payment, identity | Contract |
| Deliver the AI assistant service | Knowledge content, usage | Contract |
| Fraud prevention and platform security | Device, usage, identity | Legitimate interests |
| Understand platform usage and improve it | Usage analytics, device | Consent |
| Regulatory record-keeping and tax obligations | Identity, payment | Legal obligation |
| Send service-related communications | Email, identity | Contract |
| Send our newsletter, if you subscribe | Email, optional industry and website | Consent |
Where the lawful basis is "consent," you may withdraw it at any time by contacting us at contact@aidevelopia.com. Withdrawal does not affect processing that took place before withdrawal.
04 How we protect your data.
In short: encrypted connections, encrypted secrets, separate accounts and limited staff access.
- Everything you send to us travels over encrypted connections (HTTPS).
- Bot tokens, connected-account tokens and email passwords are encrypted in our database. Passwords are hashed.
- Full tenant data isolation per account.
- Access limited to essential personnel only.
Despite these controls, no online system is entirely fault-proof. We recommend using a strong unique password and securing your devices. If you become aware of a security issue, contact us immediately.
05 Security and data.
In short: what we will not do with your data, which standards we follow, and what happens if something goes wrong.
What we do not do with your data
- We do not sell your data to third parties under any circumstances.
- We do not use your customers' conversations to train AI models.
- We do not use your uploaded knowledge base to train models available to other tenants.
- We do not share data between customer accounts. Every account is isolated.
- We do not store or process Protected Health Information (PHI) as defined under HIPAA.
Your AI agent and your knowledge
Your AI assistant answers from the knowledge sources you provide: documents you upload, FAQs you write, and pages we crawl from your own website when you enable web crawling. You retain full ownership and control of everything you provide and can delete it at any time.
Standards we follow
- NDPA 2023
- The law that applies to us. AIDEVELOPIA is registered with the Nigerian CAC and is subject to the NDPA 2023, enforced by the Nigeria Data Protection Commission (NDPC).
- GDPR
- For customers in the EU and UK, we apply GDPR-aligned data handling practices. We do not currently hold GDPR certification.
- Certifications
- We do not hold a security certification today. SOC 2 is in preparation, and ISO 27001 is a future goal. We will publish them here when they are completed.
- Health data
- AIDEVELOPIA is not designed to store or process PHI. Healthcare organisations should limit the knowledge they upload to administrative, procedural, and publicly available policy documents. We do not offer a HIPAA Business Associate Agreement at this time.
If there is a data breach
If a breach affects personal data, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, as the NDPA 2023 requires. Where the breach puts you at high risk, we will also tell you without undue delay.
07 Your rights under NDPA 2023.
In short: you can see, correct, delete, restrict, object to and move your data. Email us to use any of these rights.
You have the following rights over your personal data. These rights are granted by the Nigeria Data Protection Act 2023. To exercise any right, contact us at contact@aidevelopia.com. We will respond within the timeframes required by the NDPA.
- Access & portability
- Request a copy of the personal data we hold about you, in a portable format.
- Correction
- Ask us to correct inaccurate or incomplete personal data.
- Deletion
- Request erasure of your personal data where there is no lawful reason for us to continue holding it.
- Restriction
- Ask us to restrict processing of your data in certain circumstances, for example while a correction request is being assessed.
- Objection
- Object to processing based on legitimate interests or for direct marketing purposes.
- Consent withdrawal
- Withdraw consent at any time for processing that is based on consent. This does not affect processing before withdrawal.
- Automated decisions
- Object to or request human review of any decision made solely by automated means that significantly affects you. AIDEVELOPIA does not currently make automated decisions with legal or significant effects on individuals.
08 How long we keep your data.
In short: while your account is open, plus what the law requires. Close your account and we delete your workspace.
We keep personal data only as long as it is needed for the purpose it was collected, or as required by law. Specifically:
- Account data is retained while your account is active and for a reasonable period after closure to handle outstanding matters.
- Payment and billing records are retained as required by Nigerian tax law.
- The conversation history your AI agent uses for context is deleted automatically after 90 days without activity. Records of questions and answers stay in your dashboard while your account is active.
- To close your account, email contact@aidevelopia.com from your account email. We then delete your workspace, including your knowledge base and conversations, unless the law requires us to keep something.
- Anonymised analytics data may be retained longer as it cannot identify you.
09 When data leaves Nigeria.
In short: our hosting is in the United States, and some providers process data in other countries.
Our platform is hosted in the United States, and our service providers may process data in other countries, for example AI providers, payment processing via Stripe and analytics via Google. Where this occurs we take steps to ensure appropriate safeguards are in place, consistent with NDPA 2023 requirements for cross-border data transfers.
We only use subprocessors that maintain adequate data protection standards. A full list is available at data subprocessors.
10 Children.
Our platform is not designed for or directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child's data has been collected without appropriate consent, we will delete it promptly. If you believe a child's data has been submitted, contact us at contact@aidevelopia.com.
11 Changes to this policy.
We may update this policy when we change how we process data, add new services, or in response to legal changes. When we make material changes we will update the effective date at the top of this page and notify affected users by email or an in-platform notice before the changes take effect. Continued use of the platform after notification constitutes acceptance.
12 Governing law and supervisory authority.
This Privacy Policy is governed by the Nigeria Data Protection Act 2023 (NDPA) and the NDPC General Application and Implementation Directive (GAID) 2025. AIDEVELOPIA is registered with the Nigerian Corporate Affairs Commission (CAC Registration No. 9417767). Nigerian law governs our data processing obligations.
The supervisory authority for data protection in Nigeria is the Nigeria Data Protection Commission (NDPC). If you believe we have not handled your personal data in accordance with the NDPA, you have the right to lodge a complaint with the NDPC at ndpc.gov.ng. We would, however, appreciate the opportunity to address your concern directly before you contact the regulator.
13 Exercise your rights or ask about your data.
To access, correct, delete, or port your personal data, or to withdraw consent, contact us at contact@aidevelopia.com. We will respond within the timeframes required by the NDPA 2023.