Privacy Policy

This Privacy Policy explains how IAM ("we", "us", "our") collects, uses, stores, and protects your personal information when you use the IAM platform at iam.ng. By using the Platform, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

• Account Data: Email address, password (encrypted), username
• Profile Data: Display name, bio, avatar image, phone number, location
• Content Data: Links, knowledge base entries, product listings (titles, descriptions, images, pricing)
• Commerce Data: Buyer information provided during checkout (name, email, phone, shipping address)
• Communication Data: AI assistant conversations, lead contact information

1.2 Information Collected Automatically

• Analytics Data: Page views, referrer URLs, browser user agent strings
• Visitor Identifiers: Randomly generated visitor IDs (not tied to personal identity)
• Device Information: Browser type, operating system, screen resolution
• Usage Patterns: Feature usage, interaction frequency, session timing

1.3 Information from Third Parties

• Payment Processors: Transaction status, payment references, customer IDs from Paystack
• Referral Data: Referral source and referral code tracking

2. How We Use Your Information

• Service Delivery: To create, display, and maintain your public identity page
• Commerce: To process product orders, facilitate payments, and enable buyer-seller communication
• AI Features: To power your personal AI assistant using your knowledge base content
• Analytics: To provide you with audience insights and page performance metrics
• CRM: To enable lead capture, tagging, notes, and export functionality
• Communication: To send system notifications, account updates, and security alerts
• Security: To prevent fraud, enforce our Terms, and protect user accounts
• Improvement: To analyze usage patterns and improve Platform features

3. Public vs. Private Information

4. Data Storage & Security

Your data is stored using industry-standard cloud infrastructure with the following security measures:

• Encryption at rest and in transit (TLS/SSL)
• Row-Level Security (RLS) policies ensuring data isolation between users
• Role-based access control for administrative functions
• Secure authentication with password hashing
• Regular security reviews and monitoring

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

5. AI Assistant & Conversations

When visitors interact with your AI personal assistant:

• Conversations are stored and accessible to the identity page owner through the dashboard
• AI responses are generated using your knowledge base content and a third-party AI model
• Conversation data is sent to AI service providers for processing (responses are not stored by these providers beyond the session)
• Visitors are not required to provide personal information to use the AI assistant
• Contact information voluntarily shared by visitors in conversations may be captured as leads

6. Commerce & Buyer Data

When buyers purchase products through identity pages:

• Buyer information (name, email, phone, shipping address) is collected for order fulfillment
• Payment processing is handled by Paystack — IAM does not store card numbers or payment credentials
• Buyer contact information is shared with the seller for order fulfillment purposes
• Buyers are automatically added as leads in the seller's CRM for order tracking

7. Cookies & Tracking

IAM uses minimal tracking technologies:

• Session Storage: To maintain authentication state during your session
• Visitor IDs: Randomly generated identifiers stored in the browser for analytics purposes — these are not personal data and cannot be used to identify individuals
• Referral Tracking: To attribute referral clicks and affiliate earnings

We do not use third-party advertising cookies or tracking pixels.

8. Data Sharing

We do not sell your personal data. We may share information with:

• Service Providers: Cloud hosting, payment processing (Paystack), and AI model providers — strictly for service operation
• Sellers/Buyers: Commerce transaction data necessary for order fulfillment
• Legal Requirements: When required by Nigerian law, court order, or regulatory authority
• Safety: To prevent fraud, protect our users, or respond to security incidents

9. Data Retention

• Active Accounts: Data is retained for the lifetime of your account
• Deleted Accounts: Upon account deletion, personal data is removed within 30 days, except where retention is required by law
• Analytics Data: Page view data is retained indefinitely in anonymized form
• Transaction Records: Order and payment records are retained for 7 years for accounting and legal compliance

10. Your Rights

Under the Nigeria Data Protection Act 2023 (NDPA) and applicable regulations, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Update or correct inaccurate personal data through your dashboard
• Deletion: Request deletion of your account and associated personal data
• Data Portability: Export your data in a machine-readable format (CSV export available for leads and orders)
• Objection: Object to certain processing of your personal data
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, contact us at privacy@iam.ng. We will respond within 30 days.

11. Children's Privacy

IAM is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete such information promptly.

12. International Data Transfers

Your data may be processed on servers located outside of Nigeria. We ensure that any such transfers comply with the NDPA and that appropriate safeguards are in place to protect your data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or via email. The "Last updated" date at the top of this page indicates when the policy was last revised.

14. Contact & Data Protection Officer

For privacy-related questions, concerns, or to exercise your data rights: