Privacy Policy - SmartInvoice Pro

Summary: Your invoice data stays on your device. We only store your account details, licence records, and payment history on our servers. We do not sell your data.

1. Who We Are

AgoroX Technologies, operated by John Ipadeola, is the data controller for SmartInvoice Pro. We are based in Ibadan, Oyo State, Nigeria, and this Privacy Policy is governed by the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act 2023.

Contact: support@agorox.africa

2. Data We Collect

2a. Data stored on your device only (never sent to us)

This data never leaves your phone or browser unless you explicitly export or back it up:

All invoices, quotes, and receipts you create
Your customer directory and product catalogue
Invoice history, payment records, and notes
App settings (PIN, preferences, reminders)
Audit log

2b. Data stored on our servers

Data	Why We Collect It	Where Stored
Name, email address	Account creation and identification	Cloudflare D1 (EU/US)
Password (hashed)	Authentication. We store a one-way hash (PBKDF2), never the actual password	Cloudflare D1
Licence key and plan	Licence validation and multi-device activation	Cloudflare D1
Payment reference and amount	Confirming your purchase and calculating agent commissions	Cloudflare D1
Business logo, signature, NQR code images	Making your branding available across all your activated devices	Cloudflare R2 (EU/US)
Agent name, phone, market location	Operating the agent referral programme	Cloudflare D1
Shared invoice snapshots	Generating customer-facing invoice links (expires after 90 days)	Cloudflare D1

3. Legal Basis for Processing

Contract performance · Processing your account and licence data is necessary to provide the service you purchased
Legitimate interest · Storing payment records for fraud prevention and commission tracking
Consent · Sending marketing or reminder emails (you may opt out at any time)

4. How We Use Your Data

Authenticating you when you sign in
Activating and validating your licence across devices
Sending transactional emails: licence confirmation, expiry reminders, and password reset links
Calculating and paying agent commissions
Providing customer support

We do not use your data for advertising, profiling, or sell it to any third party.

5. Third-Party Services

Service	Purpose	Their Privacy Policy
Paystack	Payment processing. They handle card data · we never see your card number	paystack.com/privacy
Cloudflare (D1, R2, Workers, Pages)	Database, file storage, API hosting, website hosting	cloudflare.com/privacypolicy
Resend	Transactional email delivery	resend.com/legal/privacy-policy

6. Data Retention

Data Type	Retention Period
Account (name, email, password hash)	Until you request deletion
Licence records	7 years (financial record requirement)
Payment records	7 years (financial record requirement)
Shared invoice snapshots	90 days from creation
Password reset tokens	1 hour (auto-expired)
Business images (logo, signature)	Until you delete them or close your account
Agent profile	Until agent requests removal or account is closed

7. Your Rights Under the NDPR

As a data subject under Nigerian law, you have the right to:

Access · Request a copy of the personal data we hold about you
Correction · Ask us to correct inaccurate data
Deletion · Request deletion of your account and personal data (subject to our legal retention obligations)
Portability · Receive your data in a machine-readable format
Objection · Object to processing based on legitimate interest
Withdraw consent · Unsubscribe from emails at any time

To exercise any of these rights, email support@agorox.africa with the subject “Data Request”. We will respond within 30 days.

8. Security

We take reasonable technical and organisational measures to protect your data:

Passwords are hashed using PBKDF2 with 100,000 iterations · we cannot recover your password
All data in transit is encrypted via HTTPS/TLS
Authentication uses signed JWT tokens with 30-day expiry
Our infrastructure runs on Cloudflare, which has enterprise-grade security and SOC 2 compliance
Your invoice data never leaves your device

No system is 100% secure. If you believe your account has been compromised, contact us immediately at support@agorox.africa.

9. Cookies and Local Storage

SmartInvoice Pro does not use tracking cookies. We use browser localStorage to store your invoice data and app preferences locally on your device. This data does not leave your browser.

We store a JWT authentication token in localStorage to keep you signed in. This is not a cookie and is not sent to any third-party advertising network.

10. Children

SmartInvoice Pro is not intended for use by individuals under 18 years of age. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. The date at the top of this page indicates when the policy was last revised.

12. Complaints

If you are unsatisfied with how we handle your data, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpb.gov.ng.

13. Contact Us

AgoroX Technologies
Data Controller: John Ipadeola
Email: support@agorox.africa
WhatsApp: +234 803 412 9684
Address: Fagbenro Village, Ijaye, Moniya-Iseyin Road, Ibadan, Oyo State, Nigeria