1. Scope of this policy
This Privacy Policy explains how Gbese ("Gbese", "we", "us") collects, uses, shares, and protects information when a business ("you", "your business") signs up for and uses Gbese to track receivables, payables, and expenses via WhatsApp and the Gbese dashboard.
This policy applies to information about you as a registered business, and to information you provide to us about your customers and suppliers in the course of using the service.
2. Information we collect
Information you give us directly
- Business name, WhatsApp number, receipt short code, and email address, provided at signup.
- Payment details processed through Paystack when you subscribe to Gbese Pro — we do not receive or store your card number; Paystack handles this directly.
- Messages you send to the Gbese WhatsApp number to log debts, expenses, and payables.
- Any information you provide when contacting support.
Information generated by using the service
- Records of debts, payments, expenses, and payables you log, including amounts, dates, and status.
- Trust score data computed from your customers' payment history.
- Delivery status of reminders and receipts sent on your behalf.
3. How we use information
- To provide the core service — logging debts, sending reminders and receipts, generating payment links, and reconciling payments.
- To compute trust scores and weekly digests.
- To process subscription payments for Gbese Pro.
- To communicate with you about your account, including service updates and support.
- To maintain the security and integrity of the service, including detecting fraud or abuse.
- To improve Gbese, including analyzing aggregated, de-identified usage patterns.
4. Our legal basis for processing
Where Nigeria's Data Protection Act or similar law requires a legal basis, we rely on:
- Performance of a contract — processing necessary to provide the Gbese service you signed up for.
- Consent — where you or a message recipient has given consent, such as opting in to receive WhatsApp reminders.
- Legitimate interest — for security, fraud prevention, and improving the service, balanced against your rights.
- Legal obligation — where we are required to retain or disclose information by law.
6. Information about your customers and suppliers
When you log a debt, expense, or payable, you provide us with information about a third party — typically a name, phone number, and transaction details. You are responsible for having a lawful basis to share this information with us and for the accuracy of what you enter.
We act as a data processor for this information on your behalf. We use it only to provide the service to you — generating receipts, sending reminders, and calculating trust scores — and not for our own independent purposes.
If a customer or supplier objects to receiving messages from Gbese on your behalf, or wishes to exercise a data right, they should contact you directly as the business that logged their information; we will support you in responding to such requests.
7. Data retention
We retain your account and transaction records for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, or dispute-resolution obligations. You may request deletion of your account and associated data, subject to any records we're legally required to keep.
8. Security
We use reasonable technical and organizational measures to protect information, including encrypted connections, access controls, and secure hosting. No system is completely secure, and we cannot guarantee absolute security.
9. Your rights
Subject to applicable law, you may have the right to access, correct, delete, or export your business's data, and to object to or restrict certain processing. To exercise these rights, contact us using the details in Section 13.
10. Children's privacy
Gbese is intended for business use by adults. We do not knowingly collect information from individuals under 18.
11. International data transfers
Some of our service providers, including cloud hosting and AI processing providers, may process data outside Nigeria. Where this occurs, we take steps to ensure an appropriate level of protection consistent with applicable data protection law.
12. Changes to this policy
We may update this policy from time to time. We'll update the "Last updated" date above, and for material changes, we'll make reasonable efforts to notify you directly.
13. Contact us
Questions about this policy or how your information is handled can be sent to privacy@gbese.ng.