Privacy policy
Overview
This Privacy Policy explains how Inbox Naija collects, uses, shares, and protects personal information when you use our website and Service.
We are the data controller for your account and billing. When you upload subscriber lists and send campaigns, you are usually the controller for recipient data and we act as a processor on your instructions.
We are the data controller for your account and billing. When you upload subscriber lists and send campaigns, you are usually the controller for recipient data and we act as a processor on your instructions.
Information we collect
• Account information: name, email, company, phone, billing details, and preferences.
• Subscriber and campaign data: lists, custom fields, content, templates, sends, opens, clicks, bounces, and complaints.
• Usage information: features used, support tickets, and in-product actions.
• Technical information: IP address, browser, device data, and logs for security.
• Communications you send to our support or sales teams.
• Subscriber and campaign data: lists, custom fields, content, templates, sends, opens, clicks, bounces, and complaints.
• Usage information: features used, support tickets, and in-product actions.
• Technical information: IP address, browser, device data, and logs for security.
• Communications you send to our support or sales teams.
How we use information
• Provide, maintain, and secure the Service.
• Send necessary service emails (receipts, security alerts, critical notices).
• Process payments and prevent fraud.
• Improve deliverability, performance, and experience.
• Respond to support requests and enforce our Terms.
• Comply with legal obligations in the Federal Republic of Nigeria and defend our rights.
• Send necessary service emails (receipts, security alerts, critical notices).
• Process payments and prevent fraud.
• Improve deliverability, performance, and experience.
• Respond to support requests and enforce our Terms.
• Comply with legal obligations in the Federal Republic of Nigeria and defend our rights.
Legal bases for processing
Where GDPR applies, we rely on contract, legitimate interests (security and improvement), consent (for example non-essential cookies), and legal obligation as appropriate.
If you or recipients are in Nigeria, the NDPA may also apply. We process data lawfully with appropriate safeguards. You are responsible for having a lawful basis to collect and email your subscribers.
If you or recipients are in Nigeria, the NDPA may also apply. We process data lawfully with appropriate safeguards. You are responsible for having a lawful basis to collect and email your subscribers.
How we share information
• Service providers (hosting, delivery, payments, analytics, support) under confidentiality and processing terms.
• Authorities when required by law or to protect rights and safety.
• Successors in a merger or acquisition, with continued data protection.
We do not sell your personal information for third-party marketing.
• Authorities when required by law or to protect rights and safety.
• Successors in a merger or acquisition, with continued data protection.
We do not sell your personal information for third-party marketing.
How long we keep information
We keep account and billing data while your account is active and for a reasonable period afterward for legal and dispute needs. Campaign and subscriber data follows your settings and plan. You may export or delete data where the product allows.
Cookies
We use essential cookies to keep you signed in and run core features. With your consent we may use analytics cookies on our marketing site to understand usage. You can change accept or decline via our cookie banner and change your choice anytime. Blocking essential cookies may limit functionality.
GDPR, NDPA & your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing, and to data portability. You may withdraw consent where processing is based on consent. You may complain to a supervisory authority (for example the ICO, an EU authority, or the Nigeria Data Protection Commission).
To exercise rights about your Inbox Naija account, contact the contact details on our Contact page. We may verify your identity and aim to respond within legally required timeframes.
If you received email from our customer, that customer is usually the controller. Use their unsubscribe link first. We help suppress addresses when you use their unsubscribe flow or contact us with message details.
To exercise rights about your Inbox Naija account, contact the contact details on our Contact page. We may verify your identity and aim to respond within legally required timeframes.
If you received email from our customer, that customer is usually the controller. Use their unsubscribe link first. We help suppress addresses when you use their unsubscribe flow or contact us with message details.
International transfers
We may process data in the Federal Republic of Nigeria and where our providers operate. International transfers use appropriate safeguards such as standard contractual clauses where required.
Data security
We use technical and organizational measures to protect data, including access controls and encryption in transit where supported. No system is completely secure. Use strong passwords and limit account access.
Children
The Service is not directed at children under 18. We do not knowingly collect their data. Contact us if you believe a child provided information and we will take appropriate steps.
Changes to this policy
We may update this policy and post changes here with an updated “Last updated” date. Material changes will be communicated by email or in-product notice where appropriate.
Contact
Privacy questions or requests? Contact the contact details on our Contact page.
Have legal counsel review this text before relying on it in production.