Privacy policy

This policy explains how personal and business information is used when you visit InvoicePadi, register your business on WhatsApp, use the dashboard, or create invoices and bookkeeping records. It also covers customer information a business enters into an invoice.

InvoicePadi is built for Nigerian commerce. Where applicable, personal information must be handled in accordance with the Nigeria Data Protection Act 2023 and other applicable data-protection requirements. This policy is not a claim of certification or regulatory approval.

We process the information you provide and the technical records needed to operate the service. Please share only information necessary for your business records.

• Business profile: business name, the registering person’s full name, WhatsApp number, contact information, address, logo, brand colour, payment terms and bank account details you choose to provide.
• Invoice and customer records: customer names and contact details you enter, products, quantities, prices, delivery charges, discounts, dates, invoice numbers and payment updates.
• Bookkeeping records: income, expenses, transaction categories, notes and recorded payments.
• Conversations and delivery records: messages sent to the bot, conversation state, message identifiers, verified webhook payloads and outgoing-message delivery information.
• Account and technical information: dashboard sign-in details where you use an account, session information and operational error records. Uploaded logos and generated PDF invoices are also stored.

Information is used to register and recognise your business number, reuse your saved profile, interpret your orders, ask clarification questions, calculate invoice totals, generate PDFs, record your reported payments and show your business records.

Technical and delivery records help prevent duplicate invoices, diagnose failed messages, retry interrupted processing and protect the service from abuse. We also use information to maintain the service and respond to requests where a contact channel is available.

Depending on the activity and applicable law, processing may be necessary to provide the service you request, meet a legal obligation, or pursue legitimate interests such as security and reliable message delivery, subject to your rights. Consent is required where applicable; not every service activity relies on consent.

You choose which optional customer details, logo and bank details to include. Do not enter another person’s information unless you have a lawful reason to use it. InvoicePadi’s business users remain responsible for their own customer notices and permissions.

Messages and documents pass through Meta’s WhatsApp Business service. WhatsApp has its own terms and privacy policy, which apply separately. A conversation with a business bot should not be treated as a private vault for sensitive information.

InvoicePadi first uses rules to interpret invoice text. When a message needs additional interpretation, relevant message text may be sent through Lovable’s AI service to an AI model provider. AI helps extract details or understand intent; it does not calculate your invoice totals. You should review the summary before confirming.

Cloud hosting, storage, authentication and technical delivery providers process information needed to supply their services. The AI integration requests that responses are not stored by the model API, but this request is not a guarantee of every provider’s retention practices. This policy does not promise that service data is excluded from all provider training or logging.

Your generated invoice is returned to the requesting business WhatsApp number. InvoicePadi does not automatically send invoices to your customers. You decide whether and when to forward them; a forwarded PDF may contain your customer, address and bank details.

Information is processed by the providers needed to operate the service and may be disclosed where legally required or reasonably necessary to address fraud, security incidents or protect legal rights. This policy does not authorise selling your customer list or publishing private business records.

The application uses access controls for business records. Logo and invoice storage is private, and downloads use temporary signed links. Verified WhatsApp delivery information and message identifiers are used to reduce unauthorised processing and duplicates.

No online service can guarantee absolute security. Keep control of your WhatsApp number and dashboard account, protect your device, and do not share sign-in or linking codes. Anyone who receives a PDF can retain or forward that copy. Never send bank PINs, OTPs, card security codes or passwords to the bot.

The service stores business profiles, invoices, bookkeeping information and conversation/delivery records to support ongoing use and troubleshooting. A fixed automatic deletion schedule for these records is not currently published; do not assume that ending a conversation deletes the underlying records.

Any deletion request needs to consider recordkeeping duties, security records, backups and applicable legal requirements. Copies you have shared with customers or that other platforms retain are outside InvoicePadi’s direct control. Unlinking a WhatsApp number is not the same as deleting your business or account.

Subject to applicable law and identity verification, you may have rights to access and correct information, request erasure or restriction, object to certain processing, receive portable information and withdraw consent where processing relies on it. Some requests may be limited by lawful recordkeeping or other obligations.

You can update your saved business address on WhatsApp using “address: 12 Allen Avenue, Ikeja, Lagos”, or view it by sending “address”. Other profile fields can be managed where the dashboard is available. There is currently no self-service account-deletion screen.

A dedicated human privacy contact is not yet listed on this site; the WhatsApp bot is an invoice service, not a verified human privacy-request channel. The Contact page distinguishes the available bot channel from human support. You may also raise a data-protection complaint with the Nigeria Data Protection Commission where applicable.

Providers such as cloud infrastructure, WhatsApp and AI services may process information outside Nigeria. Cross-border processing is subject to applicable data-protection rules and any required safeguards. This page does not represent that all information is stored in Nigeria or that every provider’s processing location has been independently verified.

Dashboard authentication uses session storage or similar technologies to maintain sign-in. Third-party services may use their own cookies or technical identifiers when you visit them. This policy does not assert that the site is free of all cookies, tracking or provider telemetry.

InvoicePadi is intended for adults conducting business. Do not submit children’s personal information or sensitive personal records that are not necessary for invoicing. If you believe such information has been entered, seek a correction or deletion review.

This policy may be updated as the product, providers or legal requirements change. The date at the top identifies the latest published version. Material changes should be communicated through appropriate available channels. Review this page before using a new feature that processes additional information.