Privacy policy.
This Privacy Policy explains how AIDEVELOPIA (https://aidevelopia.com) collects, processes, stores, and protects personal data. It applies where AIDEVELOPIA acts as the data controller. This policy is governed by the Nigeria Data Protection Act 2023 (NDPA) and the NDPC General Application and Implementation Directive (GAID) 2025.
We collect only what we need, use data only for stated purposes, protect it with appropriate security controls, and give you clear rights over it. Our processing complies with the Nigeria Data Protection Act 2023, and we apply GDPR-aligned principles for customers in the EU and UK.
Information we collect.
We collect personal data in two ways.
Information you provide directly
- Identity & contact
- Name, email address, phone number, account credentials.
- Payment information
- Processed via Stripe. We do not store raw card numbers.
- Knowledge base
- Documents, FAQs, and policies you upload to train your AI assistant.
- Support & feedback
- Messages, reviews, and service interaction records.
Information collected automatically
- Device & environment
- IP address, browser type, operating system, device identifiers.
- Usage analytics
- Page visits, session duration, feature usage, crash logs (analytics consent required).
- Cookies & tracking
- See our Cookie Declaration for full details.
Purpose and lawful basis for each type of processing.
Under the NDPA 2023, we must state the lawful basis for each purpose for which we process personal data. The table below sets this out clearly.
| purpose | data used | lawful basis |
|---|---|---|
| Create and manage your account | Identity, contact | Contract |
| Process payments and manage subscriptions | Payment, identity | Contract |
| Deliver the AI assistant service | Knowledge content, usage | Contract |
| Fraud prevention and platform security | Device, usage, identity | Legitimate interests |
| Understand platform usage and improve it | Usage analytics, device | Consent |
| Regulatory record-keeping and tax obligations | Identity, payment | Legal obligation |
| Send service-related communications | Email, identity | Contract |
| AI service quality improvement (opt-out available) | Anonymised usage patterns | Consent |
Where the lawful basis is "consent," you may withdraw it at any time by contacting us at contact@aidevelopia.com. Withdrawal does not affect processing that took place before withdrawal.
How we protect your data.
- AES-256 encryption at rest, TLS 1.3 in transit.
- Full tenant data isolation per account.
- Access limited to essential personnel only.
- Incident response procedures in place.
Despite these controls, no online system is entirely fault-proof. We recommend using a strong unique password and securing your devices. If you become aware of a security issue, contact us immediately.
Your rights under NDPA 2023.
You have the following rights over your personal data. These rights are granted by the Nigeria Data Protection Act 2023. To exercise any right, contact us at contact@aidevelopia.com. We will respond within the timeframes required by the NDPA.
- Access & portability
- Request a copy of the personal data we hold about you, in a portable format.
- Correction
- Ask us to correct inaccurate or incomplete personal data.
- Deletion
- Request erasure of your personal data where there is no lawful reason for us to continue holding it.
- Restriction
- Ask us to restrict processing of your data in certain circumstances, for example while a correction request is being assessed.
- Objection
- Object to processing based on legitimate interests or for direct marketing purposes.
- Consent withdrawal
- Withdraw consent at any time for processing that is based on consent. This does not affect processing before withdrawal.
- Automated decisions
- Object to or request human review of any decision made solely by automated means that significantly affects you. AIDEVELOPIA does not currently make automated decisions with legal or significant effects on individuals.
How long we keep your data.
We keep personal data only as long as it is needed for the purpose it was collected, or as required by law. Specifically:
- Account data is retained while your account is active and for a reasonable period after closure to handle outstanding matters.
- Payment and billing records are retained as required by Nigerian tax law.
- Knowledge base content you upload is deleted when you close your account or request deletion.
- Anonymised analytics data may be retained longer as it cannot identify you.
When data leaves Nigeria.
Your data may be processed outside Nigeria by our service providers, for example payment processing via Stripe and analytics via Google. Where this occurs we take steps to ensure appropriate safeguards are in place, consistent with NDPA 2023 requirements for cross-border data transfers.
We only use subprocessors that maintain adequate data protection standards. A full list is available at data subprocessors.
Children.
Our platform is not designed for or directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child's data has been collected without appropriate consent, we will delete it promptly. If you believe a child's data has been submitted, contact us at contact@aidevelopia.com.
Changes to this policy.
We may update this policy when we change how we process data, add new services, or in response to legal changes. When we make material changes we will update the "Last updated" date and notify affected users by email or an in-platform notice before the changes take effect. Continued use of the platform after notification constitutes acceptance.
Governing law and supervisory authority.
This Privacy Policy is governed by the Nigeria Data Protection Act 2023 (NDPA) and the NDPC General Application and Implementation Directive (GAID) 2025. AIDEVELOPIA is registered with the Nigerian Corporate Affairs Commission (CAC Registration No. 9417767). Nigerian law governs our data processing obligations.
The supervisory authority for data protection in Nigeria is the Nigeria Data Protection Commission (NDPC). If you believe we have not handled your personal data in accordance with the NDPA, you have the right to lodge a complaint with the NDPC at ndpc.gov.ng. We would, however, appreciate the opportunity to address your concern directly before you contact the regulator.
Exercise your rights or ask about your data.
To access, correct, delete, or port your personal data, or to withdraw consent, contact us. We will respond within the timeframes required by the NDPA 2023.