Welcome to InWorkflo. We respect your privacy and are committed to protecting it in accordance with the Nigeria Data Protection Act (NDPA) 2023, the Nigeria Data Protection Regulation (NDPR), and, where applicable, the General Data Protection Regulation (GDPR). This Privacy Policy describes how we collect, use, process, store, and share your information when you use our services.
By using our services, you consent to the data practices described in this policy.
1. Data We Collect
We collect information you provide directly through:
- Account registration: Company name, email address, industry, business description, and website.
- WhatsApp messages: Phone number, message content, and conversation interactions.
- Web form submissions: Name, email, phone, company name, industry, and message content.
- Meta Lead Ads: Name, email, phone, campaign ID, and ad ID.
- Payment information: Transaction references and billing details processed securely via Paystack. We do not store your card details.
We only initiate WhatsApp messages to users who have provided explicit, active opt-in consent through our web forms, Meta Lead Ads, or by initiating a conversation with us first.
2. Lawful Basis for Processing
Under the NDPA 2023 and GDPR, we process your data based on one or more of the following legal bases:
- Consent: You have given explicit consent for the specific purpose (e.g., receiving WhatsApp messages, email outreach).
- Performance of a Contract: Processing is necessary to provide the services you have subscribed to.
- Legitimate Interest: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring security.
3. How We Use Your Data
- Lead Qualification and Scoring — assessing whether enquiries match your ideal customer profile
- AI-Powered Automated Responses — via WhatsApp and email using large language models
- Conversation Context Maintenance — maintaining conversation history for continuity
- Lead Enrichment — via public website research
- Follow-ups and Outreach — sending relevant follow-up communications
- Calendar Booking — scheduling meetings for qualified leads
- Analytics and Reporting — generating insights on lead performance
- Billing and Subscription Management — processing payments and managing your account
4. Third-Party Services
We use the following third-party services to deliver our platform:
- Meta / WhatsApp Business API — messaging and lead ads integration
- OpenAI GPT-4o-mini via OpenRouter — AI conversation and content generation
- Google Workspace (Sheets & Calendar) — CRM data management and meeting scheduling
- Paystack — secure payment processing
- DigitalOcean — cloud server infrastructure
We do not sell, rent, or trade your personal data to any third parties. Data shared with the services above is strictly for the purpose of providing our platform functionality.
5. Data Storage, Security, and Cross-Border Transfers
Your data is stored on secure cloud servers provided by DigitalOcean, which may be located outside Nigeria. Where data is transferred outside Nigeria, we ensure that adequate safeguards are in place in compliance with the NDPA 2023, including reliance on the service provider's security certifications and data processing agreements.
We implement industry-standard security measures including SSL/TLS encryption, access controls, and secure authentication to protect your data from unauthorised access, alteration, or disclosure.
6. Data Retention
We retain personal data only as long as necessary to fulfil the purposes outlined in this policy, or as required by law. When data is no longer needed, it is securely deleted from our active systems within 30 days.
7. Data Controller and Data Processor
When a business subscribes to InWorkflo and uploads or receives leads, the business is the Data Controller and InWorkflo acts as the Data Processor. If you are a customer or lead of a business that uses InWorkflo, please direct data-related requests to that business in the first instance.
8. Your Rights
Under the NDPA 2023 and GDPR, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Deletion (Erasure): Request deletion of your personal data at any time.
- Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
- Right to Restrict Processing: Request that we limit how we process your data.
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Withdraw consent at any time for consent-based processing.
- Right to Lodge a Complaint: File a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data rights have been violated.
- Opt-out of WhatsApp messages: Reply "STOP" to any WhatsApp message or contact us.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of our services after changes constitutes acceptance of the updated policy.
10. Data Protection Officer & Contact
For questions about this Privacy Policy, your data, or to exercise your rights, contact our Data Protection Officer:
Email: knjoku228@gmail.com
Website: inworkflo.com