Privacy Policy

This Privacy Policy explains how New Generationweb Solution, operating the Sendly.ng platform ("Sendly", "we", "us"), collects, uses, shares, and protects personal data in connection with the Service. We process personal data in line with the Nigeria Data Protection Act, 2023, and other applicable Nigerian data protection law.

This policy covers two kinds of personal data: data about you as a Sendly account holder or team member, and data about the contacts you upload to Sendly in order to message them. We are the data controller for the first kind, and we act as a data processor on your behalf for the second — you remain responsible for having a lawful basis to upload and message your own contacts.

Account and business information you give us directly:

• Name, email address, phone number, and password when you register.
• Business details you provide during onboarding or Sender ID/KYC verification, such as business name, registration documents, and supporting letters.
• Payment information needed to fund your wallet — handled by our payment processor (Paystack); Sendly does not store your full card number.

Information generated by using the Service:

• Messages you send (content, sender, recipient number, timestamp, delivery status) and campaigns you create.
• Contacts and contact groups you upload for messaging purposes.
• Usage and log data — pages visited, API calls made, IP address, device/browser information, and timestamps — used for security, fraud prevention, and improving the Service.
• Wallet and transaction history.

• To provide, operate, and maintain the Service, including sending your messages through our upstream messaging partners.
• To process payments and maintain an accurate wallet ledger.
• To verify your identity and business details where required for a Sender ID or compliance purposes.
• To detect, prevent, and investigate fraud, abuse, security incidents, and violations of our policies.
• To communicate with you about your account, service updates, and — only where you have opted in — product news.
• To comply with legal, regulatory, and law-enforcement requests.

We share personal data only where necessary to operate the Service:

• Upstream messaging partners (currently including Termii, Messaging.ng, Sendchamp, and SmartSMS Solutions), to deliver the messages you send.
• Our payment processor, Paystack, to process wallet funding.
• Infrastructure providers that host our database, authentication, and application (currently Supabase and our hosting provider), under contractual confidentiality obligations.
• Regulators, law enforcement, or courts, where required by law.
• A successor entity, in the event of a merger, acquisition, or sale of assets, subject to this policy continuing to apply to your data.

We do not sell your personal data.

We retain account and transaction data for as long as your account is active and for a reasonable period afterward to meet legal, tax, audit, and dispute-resolution obligations. Message content and delivery logs are retained for the period necessary for billing accuracy, delivery troubleshooting, and any applicable regulatory requirement, after which they may be deleted or anonymized.

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, or object to certain processing. To make a request, contact us using the details below; we may need to verify your identity first. Deleting an account does not automatically delete wallet or transaction records we are required to keep for legal or audit purposes.

We apply technical and organizational safeguards designed to protect personal data, including encrypted connections, row-level data isolation between customer accounts, access controls, and audit logging. No system is completely secure, and we cannot guarantee absolute security, but we work to identify and address risks on an ongoing basis, including before this platform is opened to the public.

We use essential cookies needed to keep you signed in and to keep the Service secure (for example, session and security cookies). We do not currently use advertising or third-party tracking cookies. If that changes, we will update this policy.

The Service is intended for businesses and individuals acting in a business capacity, and is not directed at children. We do not knowingly collect personal data from children.

Our infrastructure providers may process or store data outside Nigeria. Where this happens, we take reasonable steps to ensure an equivalent standard of protection, consistent with the Nigeria Data Protection Act, 2023.

We may update this Privacy Policy from time to time. Material changes will be communicated in the same way as changes to our Terms of Service.

For privacy questions or to exercise your rights, contact us at info@sendly.ng or 0701 352 1801. Registered address: No 9, Cairo Street, Wuse II, Abuja, Nigeria.