Privacy Policy

1. Who we are

SOLO SME ("SOLO", "we", "our" or "us") is operated by Disbursify Tech Solutions Ltd (RC 8530579), a company incorporated in Nigeria with its registered office at No. 3, Ibrahim Commassie Road, GRA Ring Road, Katsina, Katsina State, Nigeria. We are the data controller for the personal data described in this policy and can be reached at hello@solosme.ng.

This policy explains how we collect, use, share and protect personal data when you use the SOLO platform and storefronts. It is issued in compliance with the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR) 2019.

2. Controllers, merchants and customers

SOLO serves two groups of people, and our role differs for each:

• Merchants — businesses that use SOLO to run a storefront. For merchant account data we are the data controller.
• Customers — people who buy from a merchant's storefront. For customer order data, the merchant is the controller of their own customer relationships and SOLO acts as a data processor on the merchant's behalf, while also acting as controller for the limited data we need to run the platform (fraud prevention, security, legal compliance).

3. Personal data we collect

• Account & profile: name, email, phone number, business name, logo and address.
• Order & customer data: customer name, phone number, delivery address and order details.
• Transaction data: amounts, references and status. Card and bank details are handled solely by our licensed payment partners — SOLO never stores full card numbers.
• Business records: products, inventory, sales and ledger entries you create.
• Integration data: WhatsApp Business account identifiers and message logs you connect.
• Technical data: IP address, device and browser information, and cookies needed to keep you signed in and secure the service.

4. Why we process your data (lawful basis)

Under the NDPA 2023 we rely on the following lawful bases:

• Performance of a contract — to create your account, run your storefront, process orders and provide support.
• Consent — for optional features such as marketing messages and, where required, automated WhatsApp communications. You may withdraw consent at any time.
• Legal obligation — to meet tax, anti-fraud, and record-keeping duties.
• Legitimate interests — to secure the platform, prevent abuse, and improve our services, balanced against your rights.

5. How we use your data

• Provide, maintain and secure the platform and your storefront.
• Process orders and payments and maintain your business ledger.
• Send transactional messages (receipts, order updates) and, with consent, notifications.
• Generate business insights using AI, on your own data and at your request.
• Detect, prevent and investigate fraud, abuse and security incidents.
• Comply with legal obligations and enforce our Terms.

6. Who we share data with

We share personal data only with service providers that help us run SOLO, under contract and only as needed:

• Payment processors (e.g. Paystack, Flutterwave) — to take payment and settle merchants.
• Infrastructure & database (e.g. Supabase, Vercel) — to host the application and store data securely.
• Messaging (Meta / WhatsApp Business, and our email provider) — to deliver the communications you use.
• AI processing (Google Gemini) — to generate insights on your data at your request.

We do not sell your personal data. Merchants receive the customer data relating to their own orders.

7. International transfers

Some of our service providers store or process data outside Nigeria. Where personal data is transferred abroad, we take steps required by the NDPA 2023 to ensure an adequate level of protection, including contractual safeguards with those providers.

8. Data retention

We keep personal data only for as long as needed for the purposes above and to meet legal, tax and accounting obligations. Business and transaction records are typically retained for the period required by Nigerian law; account data is deleted or anonymised on request once we no longer need it, subject to those obligations.

9. Your rights

Under the NDPA 2023 you have the right to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Request deletion of your data where the law allows.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting prior processing.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise any right, email legal@solosme.ng. We respond within the timeframes set by the NDPA.

10. Security

We apply appropriate technical and organisational measures, including row-level access controls, encryption of sensitive credentials in transit and at rest, restricted access to production systems, and payment handling delegated to licensed processors. No system is perfectly secure, but we work to protect your data and will notify you and the NDPC of a data breach where the law requires.

11. Cookies

We use strictly necessary cookies to keep you signed in and to secure the service, and limited analytics to understand and improve usage. You can control cookies through your browser settings; disabling necessary cookies may prevent you from signing in.

12. Children

SOLO is intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date, and where appropriate we will notify you.

14. Contact us

Data-protection enquiries: legal@solosme.ng
General enquiries: hello@solosme.ng
Disbursify Tech Solutions Ltd, RC 8530579 — No. 3, Ibrahim Commassie Road, GRA Ring Road, Katsina, Katsina State, Nigeria.