Axierra Technologies Limited (“Axierra”, “we”, “us”) provides an AI marketing and sales assistant for businesses that sell on social media. This policy explains what personal data we handle, why, who we share it with, how long we keep it, and the choices and rights you have.
It applies to our website (axierra.com), our web app and our iOS and Android apps (together, the “Service”). We are committed to the Nigeria Data Protection Act 2023 (“NDPA”) and, where it applies, the EU and UK GDPR.
1. Who we are, and our role
Axierra Technologies Limited, RC 0000000, 12 Example Street, Lekki Phase 1, Lagos, Nigeria. Data protection contact: [email protected].
We act in two roles:
- Controller of information about the people who use Axierra to run their business (“Business Users”): their account, billing and usage data.
- Processor (service provider) of information about a Business User’s own customers, such as people who message, comment on or buy from a Business User’s pages. The Business User decides why and how that data is used and is the controller. We process it only to provide the Service and on their instructions.
If you are a customer of a business that uses Axierra and you want to see or delete your data, please contact that business first. You can also contact us and we will help (see section 9).
2. What we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account data | Name, email address, phone number, password (stored only as a one-way hash), business name, business type, role and team members. | You |
| Connected account data (from Meta) | The Instagram, Facebook Page and WhatsApp Business accounts you connect: account and Page IDs, usernames, display names, profile pictures, and the access tokens that let Axierra act for you (stored encrypted). | Meta, when you connect an account |
| Messages and comments (from Meta) | Direct messages, WhatsApp messages, comments and mentions your customers send to your connected accounts: the text, attachments’ type and link, timestamps, and the sender’s platform ID and display name. Replies sent by you or by Axierra. | Meta, in real time through webhooks |
| Customer and order data | Customer names, phone numbers, emails and delivery addresses that customers provide in chat or at checkout; leads, orders, order items, delivery details, notes and tags. | Your customers, and you |
| Business content | Products and services, prices, photos, videos, captions, templates, posts, campaigns, discount rules and settings you create. | You |
| Payment data | Transaction references, amounts, status, payout and bank account details you give us for withdrawals. Card numbers are entered on Paystack’s page and are never seen or stored by us. | You, Paystack |
| Usage and device data | Log data (IP address, browser and device type, pages and actions), error reports and an audit trail of actions taken in your workspace. | Automatically |
| Communications | Messages you send to our support team and your email preferences. | You |
We do not knowingly collect sensitive personal data. Please ask your customers not to share it in chats. We do not collect data from children, and the Service is not for anyone under 18.
3. Data we receive from Meta (Instagram, Facebook and WhatsApp)
When you connect an account, Meta asks you to approve specific permissions. We request only what each feature needs, and use the data only to provide that feature to you:
- Messages (Instagram, Facebook Messenger, WhatsApp): to read your customers’ messages and send replies, order and payment links, reminders and approved WhatsApp templates on your behalf.
- Comments and mentions: to read comments on your own posts and mentions of your account, reply to them, send a private reply, and hide spam when you switch that on.
- Publishing: to publish the photos, videos, Reels and carousels you create or approve to your Instagram and Facebook Page.
- Insights: to show how your posts and ads perform and which of them led to sales.
- Ads: to create and report on ads you ask Axierra to run, using the budget you set.
We follow the Meta Platform Terms and Developer Policies. In particular:
- We use Meta data only to provide and improve the features you use, never to build profiles for advertising.
- We do not sell Meta data or share it with data brokers, ad networks or anyone who would use it for advertising.
- We do not use Meta data to make decisions about eligibility for credit, employment, insurance or housing.
- You can disconnect any account at any time, and you can ask us to delete the data (see section 8).
Axierra is not affiliated with, endorsed by or sponsored by Meta Platforms, Inc., WhatsApp or TikTok.
4. How we use data, and our legal bases
| Purpose | Legal basis (NDPA / GDPR) |
|---|---|
| Provide the Service: connect accounts, reply to customers, take orders, publish content, run campaigns and reports | Contract with the Business User; legitimate interests |
| Process payments, payouts and subscriptions | Contract; legal obligation |
| Keep the Service secure, prevent fraud and abuse, and keep an audit trail | Legitimate interests; legal obligation |
| Support you and send service messages (receipts, security alerts, product changes) | Contract; legitimate interests |
| Improve and develop the Service, using aggregated or de-identified data where possible | Legitimate interests |
| Send marketing emails about Axierra | Consent, which you can withdraw at any time |
| Comply with law and respond to lawful requests | Legal obligation |
5. How AI is used with your data
Axierra uses a third-party AI provider (currently Anthropic) to write replies, captions and plans. To do this we send it the relevant parts of a conversation or request, together with your product and business information, so it can answer accurately. Under our agreement with the provider, this content is not used to train its models.
AI output can be wrong. Prices, stock and totals are always taken from your catalogue and calculated by our servers, not by the AI, and you can require approval before anything is sent. No decision with legal or similarly significant effect on an individual is made by AI alone.
6. Who we share data with
We share data only with service providers we need to run the Service, under written agreements:
| Provider | Why |
|---|---|
| Meta Platforms (Instagram, Facebook, WhatsApp) | Sending and receiving messages, publishing, ads and insights on accounts you connect |
| Anthropic | AI processing of conversations, captions and plans |
| Paystack | Payments, payment links, refunds and payouts |
| Cloudflare | Secure storage for photos and videos you upload (R2), and website delivery |
| Cloud hosting and database providers | Running the Service and storing data |
| SendGrid | Sending account and service emails |
| Delivery partners such as KXpress/Konga Logistics | Booking deliveries you ask for, with the customer’s name, phone and address |
| Google (Calendar) | Only if you connect it, to book appointments |
| Shopify and similar | Only if you connect your store, to sync your catalogue |
We may also disclose data if required by law or to protect rights, safety or security, and to a successor if we are part of a merger or sale (we will tell you first). We never sell personal data.
7. International transfers
Some of our providers process data outside Nigeria, including in the United States and Europe. When we transfer personal data, we use safeguards recognised by the NDPA and GDPR, such as contractual protections and providers with appropriate security commitments.
8. How long we keep data
| Data | How long |
|---|---|
| Account, conversations, leads, orders and settings | While your account is active |
| After you delete your account | A 30-day grace period so you can change your mind, then permanent deletion within 30 days. Encrypted backups expire within 35 days after that. |
| Photos and videos used in published posts | Our copy is deleted 30 days after publishing (the post itself stays on the platform). A small preview image is kept. Videos attached to a product are kept while the product uses them. |
| Uploads never attached to anything | 7 days |
| Audit logs of actions in your workspace | 12 months |
| Payment, invoice and tax records | 6 years, as financial regulations require, even after account deletion |
| Customers who replied STOP | We keep only the fact that they opted out, so we never contact them again |
9. Deleting your data
You can delete your data at any time, and you can ask us to delete the data we received from Meta. Full step-by-step instructions are on our Data Deletion page. In short:
- In the app: Settings, Account, “Delete my account and all data”.
- By email: [email protected].
- From Facebook or Instagram: remove Axierra from your connected apps and we receive an automatic deletion request.
10. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you and get a copy.
- Correct data that is wrong or incomplete.
- Delete your data.
- Restrict or object to certain processing, including direct marketing.
- Receive your data in a portable format.
- Withdraw consent at any time, without affecting what happened before.
- Not be subject to a decision based only on automated processing with significant effects.
- Complain to the Nigeria Data Protection Commission (NDPC), or to your local authority if you are in the EU or UK.
To use these rights, email [email protected]. We may need to confirm who you are, and we reply within 30 days.
11. How we protect data
We use encryption in transit and for stored access tokens, separate workspaces so one business can never see another’s data, role-based access, audit logging and signed, verified webhooks. No system is perfectly secure. If a breach affects your data we will tell you and the NDPC within the time the law requires. More on our Security page.
12. Cookies
We use only essential cookies to keep you signed in and secure. We load no advertising or analytics trackers unless you accept them. Details are in our Cookie Policy.
13. Changes to this policy
We will post any changes here and update the effective date. For material changes we will email Business Users or show a notice in the app before they take effect.
14. Contact us
Axierra Technologies Limited, 12 Example Street, Lekki Phase 1, Lagos, Nigeria.
Privacy: [email protected] · General: [email protected] · +234 000 000 0000