Privacy Policy

Contents

• 1. Introduction
• 2. Scope of This Policy
• 3. Data Controller Information
• 4. Information We Collect
• 5. Information You Provide
• 6. Information Collected Automatically
• 7. Information from Third Parties
• 8. How We Use Information
• 9. Legal Bases for Processing
• 10. AI Processing and Automation
• 11. WhatsApp Business Integration
• 12. Merchant Data Ownership
• 13. Payments and Financial Data
• 14. Cookies and Tracking Technologies
• 15. Data Sharing and Disclosure
• 16. International Data Transfers
• 17. Data Retention
• 18. Security Measures
• 19. Your Rights Under NDPA
• 20. Your Rights Under GDPR (Where Applicable)
• 21. Children's Privacy
• 22. Marketing and Communications
• 23. Third-Party Services
• 24. Data Breach Procedures
• 25. Changes to This Policy
• 26. Contact Information

1. Introduction

This Privacy Policy describes how Tencrest Technologies (“Tencrest”, “we”, “our”, or “us”) processes personal and business information when you access or use our platform, including our website, applications, APIs, WhatsApp integrations, AI tools, and related services.

We are committed to protecting the privacy of merchants, customers, and users who interact with our platform while enabling modern AI commerce infrastructure for African businesses.

2. Scope of This Policy

This Privacy Policy applies to all services offered by Tencrest, including merchant dashboards, AI assistants, WhatsApp Business integrations, analytics tools, payment enablement features, and any other related digital services.

It applies to merchants, business users, and individuals whose data is processed through merchant activity on the platform.

3. Data Controller Information

Tencrest Technologies acts as the data controller for personal data processed through the platform, and as a data processor for certain merchant-supplied customer data depending on the context of use.

Contact details for privacy-related inquiries will be provided in the Contact section of this policy.

4. Information We Collect

We collect information necessary to provide and improve our services, including account information, business data, usage data, and technical information from devices and browsers.

5. Information You Provide

This includes information merchants or users directly provide such as business names, contact details, inventory data, customer lists, product descriptions, WhatsApp messages, and support requests.

6. Information Collected Automatically

When you use Tencrest, we automatically collect technical and usage data such as IP addresses, device identifiers, browser type, system logs, interaction data, and performance metrics to ensure security, reliability, and platform optimization.

7. Information from Third Parties

We may receive information from third-party services such as WhatsApp Business Platform, payment service providers, identity verification services, analytics providers, and cloud infrastructure partners.

8. How We Use Information

We use collected information to provide core platform functionality, including enabling merchant operations, powering AI-driven insights, improving customer engagement tools, securing accounts, preventing fraud, and ensuring platform stability.

9. Legal Bases for Processing

We process personal data in accordance with applicable data protection laws, including the Nigeria Data Protection Act (NDPA 2023). Our legal bases for processing include performance of a contract, legitimate interests in operating and improving our platform, compliance with legal obligations, and consent where required.

10. AI Processing and Automation

Tencrest uses artificial intelligence systems to assist merchants in managing business operations, including generating responses, summarizing conversations, recommending actions, and analyzing business performance.

AI-generated outputs are provided for informational and operational assistance only and may not always be accurate or complete. Merchants are responsible for verifying outputs before relying on them for business decisions.

We do not use AI systems to make legal or automated decisions that produce legal or similarly significant effects without human oversight.

11. WhatsApp Business Integration

Tencrest integrates with the WhatsApp Business Platform to enable merchants to communicate with their customers. By using this feature, merchants authorize Tencrest to process messages and related metadata strictly for providing platform functionality.

Merchants are solely responsible for ensuring compliance with applicable WhatsApp Business Terms, Meta policies, and all applicable laws relating to customer consent, messaging, and communications.

12. Merchant Data Ownership

Merchants retain ownership of all business data they upload or generate on the platform, including inventory data, customer records, product listings, and communication content.

Tencrest processes this data solely to provide services to the merchant and does not claim ownership over merchant business data.

13. Payments and Financial Data

Tencrest does not directly process or store payment card details. Payment processing is handled by licensed third-party payment providers. We may facilitate payment initiation and tracking through these providers.

Any financial data processed through third-party providers is subject to their respective privacy policies and terms.

14. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience, maintain session security, analyze usage patterns, and improve platform performance.

Users may control cookie preferences through their browser settings, although disabling cookies may impact platform functionality.

15. Data Sharing and Disclosure

We do not sell personal data. We may share data with trusted service providers who assist in operating our platform, including cloud infrastructure providers, analytics providers, messaging services, identity verification providers, and payment partners.

Data may also be disclosed where required by law, regulation, or legal process.

16. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including jurisdictions that may have different data protection laws.

Where applicable, we implement appropriate safeguards to ensure lawful and secure data transfers in accordance with NDPA and other applicable regulations.

17. Data Retention

We retain personal data only for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements.

18. Security Measures

We implement appropriate technical and organizational security measures including encryption, access controls, monitoring systems, and secure cloud infrastructure to protect personal and business data.

19. Your Rights Under NDPA

Subject to applicable law, you have rights to access, correct, update, or request deletion of your personal data. You may also object to or restrict certain processing activities and withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with the relevant data protection authority in Nigeria.

20. Your Rights Under GDPR (Where Applicable)

If you access our services from the European Economic Area (EEA), you may have additional rights under the General Data Protection Regulation (GDPR), including data portability, restriction of processing, and the right to object to processing based on legitimate interests.

21. Children's Privacy

Tencrest services are intended for business use only and are not directed to individuals under the age of 18. We do not knowingly collect personal data from children.

22. Marketing and Communications

We may send service-related communications such as updates, security alerts, and administrative messages. Marketing communications are sent only where permitted by law or with user consent, and you may opt out at any time.

23. Third-Party Services

Our platform integrates with third-party services such as WhatsApp Business Platform, payment providers, cloud hosting services, analytics tools, and AI service providers. These third parties process data under their own privacy policies.

24. Data Breach Procedures

In the event of a personal data breach, we will take appropriate steps to mitigate harm and notify affected users and relevant authorities where required by applicable law.

25. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. We will notify users of material changes through our platform or other appropriate channels.

26. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, you may contact us at: