Skip to the content
Inventra

Privacy policy

Version 2026-10-11 · Effective 11 October 2026

1. Introduction

1.1 This Privacy Policy describes how Ebee Solutions LTD (RC 9065956) ("Inventra", "we", "us" or "our") collects, uses, discloses and safeguards personal data in connection with the Inventra platform, its applications and this website (together, the "Service").

1.2 This Policy is issued in accordance with the Nigeria Data Protection Act 2023 (the "NDPA") and any regulations and guidance issued by the Nigeria Data Protection Commission (the "Commission"). Capitalised terms not defined herein have the meaning given to them in our Terms of Service.

2. Roles of the parties

2.1 Data controller. We act as data controller in respect of personal data relating to the owners and authorised users of stores, persons who sign up for the Service, and persons who contact us.

2.2 Data processor. In respect of personal data that a store records about its own customers through the Service, the store is the data controller and we act as its data processor, processing such data solely on the store's documented instructions and for the purpose of providing the Service. Data subjects wishing to exercise their rights in respect of such data should direct their request to the relevant store in the first instance.

2.3 Receipts shared by stores. A store's receipts include the name and telephone number of the customer concerned. A store may print, download or share a receipt from its own device through an application of its choosing; we do not send such receipts to customers and do not receive any information about where they are sent. The store is responsible as data controller for any such disclosure.

3. Categories of personal data

We may collect and process the following categories of personal data:

  • (a) Identity and contact data, including name, telephone number and email address;
  • (b) Account and authentication data, including credentials and security information, which are stored using industry-standard protective measures;
  • (c) Store data, including business details and the records a store maintains on the Service, which may include the names and telephone numbers of the store's customers;
  • (d) Transaction data, including details of subscription payments; payment card and bank account details are processed directly by our third-party payment service providers and are not received or stored by us;
  • (e) Communications data, including enquiries and correspondence with our support function;
  • (f) Technical and usage data, including internet protocol addresses, device and browser information, activity logs and diagnostic data; and
  • (g) Website analytics data, collected in aggregate form without the use of advertising or tracking cookies.

We collect personal data directly from you and, in some cases, from others: a store owner may provide the name and telephone number of a member of staff they add to their store, and we may provide the details of a store's owner when setting up a store on their behalf. When a store is created, our operations team is notified of the store's name and its owner's name and telephone number.

4. Purposes and lawful bases of processing

We process personal data for the following purposes and on the following lawful bases under the NDPA:

  • (a) Performance of contract: to provide, operate and maintain the Service, including account verification, the delivery of one-time codes and service notifications, record-keeping and reporting;
  • (b) Legitimate interests: to secure the Service, prevent fraud and misuse (including ensuring that each person receives no more than one free trial, preventing misuse of the referral programme and checking new passwords against known data breaches without disclosing them), maintain audit records, diagnose faults and improve the Service, provided such interests are not overridden by the rights and freedoms of data subjects;
  • (c) Legal obligation: to comply with applicable law, including tax, accounting and regulatory record-keeping requirements; and
  • (d) Consent: where required by law, in which case consent may be withdrawn at any time without affecting the lawfulness of processing prior to its withdrawal.

We send service-related communications, including one-time codes, staff invitations, account and security notices, receipts for subscription payments, and renewal and trial reminders, to the telephone number on your account by WhatsApp and, where a WhatsApp message cannot be delivered, by SMS, and to the email address on your account where one has been provided. Store owners may also receive periodic summaries of their store's activity by WhatsApp, which may be switched off in the store's settings. By providing a telephone number, you agree to receive such service messages on it. We do not sell personal data or use it for third-party advertising.

5. Disclosure of personal data

5.1 We may disclose personal data to carefully selected third-party service providers, including providers of hosting and infrastructure, storage, content delivery, communications and messaging (including WhatsApp, a service of Meta Platforms, and SMS and email delivery providers), analytics and payment processing, who process personal data on our behalf under written agreements that impose appropriate confidentiality and data protection obligations. Where a message is sent by WhatsApp, Meta Platforms receives the recipient's telephone number and the content of the message, which may include names, a store's name, one-time codes and, in periodic summaries, figures such as sales, revenue, profit and amounts owed to the store; Meta's own terms and privacy policy also apply to that processing.

5.2 We may disclose personal data where required to do so by applicable law, regulation, legal process or the lawful request of a competent public authority, or where necessary to establish, exercise or defend legal claims.

5.3 In the event of a merger, acquisition, reorganisation or sale of all or part of our business, personal data may be transferred to the relevant counterparty, subject to appropriate safeguards.

5.4 Where a store joins the Service through the referral code of another store, we may disclose to the referring store the business name of the referred store and whether it has subscribed to the Service.

6. International transfers

Our primary servers are located in Europe, and certain of our service providers, including WhatsApp (Meta Platforms) and providers of file storage and website hosting, may process personal data outside Nigeria. Where personal data is transferred outside Nigeria, we shall ensure that such transfer complies with the NDPA, including by relying on an adequacy decision, appropriate contractual safeguards or another lawful transfer mechanism.

7. Retention

We retain account and store records, including the audit records of actions taken on the Service, for as long as the account exists and thereafter for as long as necessary to satisfy legal, accounting, tax and audit requirements, to resolve disputes and to enforce our agreements, unless erasure is requested and no lawful ground for continued retention applies. The expiry or termination of a subscription does not of itself cause store data to be deleted. The content of the messages we send is deleted once a message has been delivered or has finally failed, and message records are deleted automatically after a limited period.

8. Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction, including encryption in transit, access controls, the logical separation of each store's data and regular backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Cookies and similar technologies

The Service uses strictly necessary cookies to maintain authenticated sessions and may store limited preferences on your device. We do not use advertising or cross-site tracking cookies.

10. Your rights

Subject to the conditions and exceptions set out in the NDPA, you have the right to:

  • (a) be informed about and obtain access to the personal data we hold about you;
  • (b) request the rectification of inaccurate or incomplete personal data;
  • (c) request the erasure of personal data where there is no lawful ground for its continued processing;
  • (d) restrict or object to processing, including processing based on legitimate interests;
  • (e) receive your personal data in a structured, commonly used and machine-readable format; and
  • (f) withdraw consent where processing is based on consent.

Requests may be submitted to info@inventra.ng. We shall respond within the period prescribed by the NDPA and may require verification of identity before acting on a request. You also have the right to lodge a complaint with the Commission.

11. Children

The Service is intended for use by businesses and is not directed at persons under the age of eighteen (18). We do not knowingly collect personal data from such persons.

12. Amendments

We may amend this Policy from time to time. The revised Policy shall be published on the Service with an updated version, and material changes shall be notified to store owners by appropriate means.

13. Contact

Questions concerning this Policy, or requests to our Data Protection Officer, may be addressed to info@inventra.ng or by post to Ebee Solutions LTD, Rijiyar Zaki, Kano, Kano State, Nigeria.