Privacy Policy

This policy explains what personal data Friday Technologies collects, why, who we share it with, how long we keep it and the choices and rights you have — wherever in the world you are.

1. Who we are

Friday Technologies ("we", "us", "our") provides websites, apps and software for clients, and an online platform that includes AI assistants for businesses (WebBot, App Bot, website chat, WhatsApp, Telegram, email and other channels), online payments and wallets, domains, a community with Business Connect, courses and career tools. Our head office is at Friday Technologies Plaza, Ikot Ishie, Calabar, Cross River State, Nigeria.. For data protection questions write to privacy@fridaytechnologies.ng.

2. When we are responsible, and when a business is

• Our own users and visitors. For people who visit our websites, create an account, buy from us, join the community or contact us, we decide how the data is used — we are the controller.
• Customers of businesses that use our platform. When you chat with, order from or pay a business through its WebBot, website chat, WhatsApp or other assistant we run for it, that business decides why and how your data is used (it is the controller) and we process it on its behalf (we are its processor). Questions about how a business uses your data — or requests to see or delete it — should go to that business first; we will help it respond. If you cannot reach the business, contact us.

3. What we collect

• Account details: name, email address, phone number, password (stored only as a secure hash), profile picture, country, language and currency preferences.
• Business details (if you run a business on our platform): business name, description, products and prices, opening hours, address, logo, links, bank or payout details, and the settings of your assistants.
• Conversations and orders handled for businesses: messages customers send to a business's assistant (including voice notes, which are converted to text), names, phone numbers, delivery addresses, order contents and payment status.
• Payments: amounts, references and status from our payment providers. We never see or store full card numbers or card security codes — these go directly to the payment provider.
• Community and Business Connect: posts, comments, polls, messages, follows, your business card and connection requests.
• Communications with us: emails, chats, calls and support requests.
• Technical data: IP address, approximate location (country, used to show your currency and language), device and browser type, pages visited, and log and security information.
• Course and career data if you use them: course progress, quiz results and career-tool answers.

4. How we use it, and our legal bases

We use personal data only where the law allows. Depending on your country, the legal bases are:

• To provide what you asked for — run your account and assistants, take orders, process payments and payouts, register domains, deliver courses (performance of a contract).
• To keep the platform safe and working — prevent fraud and abuse, fix problems, secure accounts, improve features (legitimate interests, balanced against your rights).
• To meet legal duties — accounting, tax, anti-fraud and responding to lawful requests (legal obligation).
• With your consent — marketing emails or messages, optional cookies and analytics, and features such as virtual try-on. You can withdraw consent at any time; this does not affect what happened before.

We do not sell your personal data, and we do not use it to make decisions that have legal or similarly significant effects on you without human involvement.

5. AI assistants and your data

• To answer messages, our assistants send the conversation and the business's own information (prices, FAQs, products) to an AI model provider to produce a reply. Providers we use include Anthropic, OpenAI and Google (the exact provider can change).
• We use these providers' business APIs, under terms in which they act as our service providers. We do not use the content of your conversations to train AI models, and we choose providers whose business terms say the same.
• Replies are generated automatically and can be wrong. Businesses can review conversations and take over at any time; important facts such as prices and orders come from the business's own data.

6. Who we share it with

We share personal data only with the service providers we need to run the platform, under contracts that require them to protect it and use it only for us:

• Payments: Paystack, Stripe and Flutterwave (depending on your country and currency), and banks for payouts.
• Messaging: Meta (WhatsApp, Messenger, Instagram), WhatsApp connection providers, Telegram, email delivery providers and, where used, Slack, Microsoft Teams and Google Chat.
• AI and speech: AI model providers (see section 5) and speech-to-text providers for voice notes.
• Infrastructure: our hosting, database, backup, content-delivery and security providers.
• Domains: domain registrars and registries, which must publish or keep some registrant details under their rules.
• The business you deal with — when you order from or chat with a business on our platform, it receives your messages and order details.
• Authorities — when the law requires it, or to protect people, our users or our rights.
• A buyer or successor — if our business is reorganised, merged or sold, under this policy.

7. International transfers

We are based in Nigeria and our providers operate in several countries, including the United States and the European Union, so your data may be processed outside your country. When we transfer data from the EU/EEA, the UK or Nigeria, we use the safeguards the law requires — such as adequacy decisions, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or other lawful transfer mechanisms under the Nigeria Data Protection Act. Ask us for a copy of the relevant safeguards.

8. How long we keep it

• Account and business data: while your account is open, then up to 12 months after it is closed (to handle disputes and restore accidental deletions), unless you ask us to delete it sooner.
• Conversations and orders handled for a business: for as long as the business keeps its account, or until it deletes them.
• Payment, payout and invoice records: up to 7 years, as required by tax and accounting law.
• Security and server logs: up to 12 months.
• Virtual try-on pictures: as described in the try-on section below.

9. Security

We protect data with encryption in transit (HTTPS), hashed passwords, encrypted storage of sensitive keys and tokens, access controls, monitoring and regular reviews. No system is perfectly secure; if a breach puts your rights at risk we will tell you and the relevant authority as the law requires.

10. Your rights

Depending on where you live, you can ask us to:

• See the personal data we hold about you and get a copy (access and portability);
• Correct it if it is wrong or incomplete;
• Delete it (erasure), unless we must keep it by law;
• Restrict or object to how we use it, including for direct marketing (you can always opt out of marketing);
• Withdraw consent where we rely on it;
• Not be subject to solely automated decisions with legal or similarly significant effects.

To use any of these rights, email privacy@fridaytechnologies.ng from the email address on your account (or tell us how to verify you). We will reply within one month, or tell you if we need longer as the law allows. We will not treat you differently for using your rights. Many details — name, phone, profile picture, business card — you can also change yourself in your account.

11. Extra information for your country or state

• Nigeria — we process personal data under the Nigeria Data Protection Act 2023 and the rules of the Nigeria Data Protection Commission (NDPC). You can complain to the NDPC.
• European Union / EEA — your rights come from the General Data Protection Regulation (GDPR). You can complain to the data protection authority in your country. Our contact for EU data protection matters is privacy@fridaytechnologies.ng.
• United Kingdom — your rights come from the UK GDPR and the Data Protection Act 2018. You can complain to the Information Commissioner's Office (ICO).
• California and other US states — under the CCPA/CPRA and similar state laws you can ask to know, delete and correct personal information and to opt out of its "sale" or "sharing". We do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you. You may use an authorised agent; we will verify requests.
• Ghana, Kenya, South Africa and other countries — you have the rights given by your local data protection law (for example Ghana's Data Protection Act, Kenya's Data Protection Act and South Africa's POPIA), and you can contact your local regulator.

12. Cookies and similar technologies

• Essential: keep you signed in, protect forms (security tokens), remember your cart and keep the site working. These cannot be switched off.
• Preferences: remember your theme (light/dark), currency, language and dismissed notices.
• Analytics: help us understand how the site is used so we can improve it. Where the law requires consent (for example in the EU/EEA and UK), we only use them with your consent.
• Business pages: businesses on our platform can add their own tools (such as Google Analytics or the Meta Pixel) to their WebBot pages; those businesses are responsible for them.

You can block or delete cookies in your browser settings; parts of the site may then not work.

13. Children

Our services are for people aged 16 and over (or the age of digital consent in your country, if higher). We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

14. Virtual try-on photos (WebBot shops)

Some WebBot shops offer a “Try on me” feature. If you use it, you choose to upload a photo of yourself (only upload a photo of yourself). We store it privately, linked only to a secret code held in your own browser, so you can reuse it. The shop owner never sees it. We send it, together with the product pictures you pick, to our image-generation provider (Google or OpenAI, as configured) only to create your try-on picture, and we do not use it for advertising. We re-save photos without their location data. Your photo stays until you change or remove it: choose “Remove my photo” in the try-on screen and we delete the photo and every picture made from it. Pictures we generate are deleted automatically after a retention period (30 days unless stated otherwise). Try-on pictures are AI previews and may not match the real product exactly.

15. Changes to this policy

We may update this policy as our services or the law change. We will post the new version here with a new date, and tell you by email or in your account about important changes.

16. Contact us

Friday Technologies · Friday Technologies Plaza, Ikot Ishie, Calabar, Cross River State, Nigeria.
Privacy: privacy@fridaytechnologies.ng · General: info@fridaytechnologies.ng · Phone / WhatsApp: +234 705 849 0911 · or our contact page.