Privacy

Who we are

Xeruvi is the data controller for the information described on this page. This section will carry our registered company name, our CAC registration number, our registered address in Nigeria, and the contact address for privacy questions.

It will also name our Data Protection Officer once we are required to appoint one under the Nigeria Data Protection Act 2023.

What we collect

Three kinds of information, and it is worth separating them because they carry very different weight.

• Account information. Your name, phone number, email address and the business you run. You give us this directly when you sign up.
• Business information. Bookings, clients, services, prices, kit, team members and expenses. This is what you put into the product, and much of it is information about other people, which is covered below.
• Bank information. Transactions read from the business account you connect, through Mono. This is read only. We never see or hold your bank login details, and we cannot move money.

Bank data, specifically

This is the part most people want a straight answer on, so it gets its own section rather than a line in a list.

You connect your business account through Mono, a licensed Nigerian open banking provider. You authenticate with your bank, not with us. Mono returns a read only feed of transactions. We use it to work out what each job earned and what you can actually afford to spend.

We cannot initiate a transfer, we cannot change anything in your account, and we never hold your bank credentials. You can disconnect the account at any time, from inside the app, and this section will explain exactly what happens to the data already read when you do.

Why we are allowed to hold it

The Nigeria Data Protection Act requires a lawful basis for each purpose. This section will set out, purpose by purpose, whether we rely on your consent, on the contract between us, on a legal obligation, or on legitimate interests, and what that means for the choices you have.

Your clients' information

When you store a client's name and phone number in Xeruvi, you are the controller of that information and we process it on your behalf. This section will set out what that split means in practice, what we do and do not do with it, and the commitments we make to you about it.

We do not sell it, we do not market to your clients, and your client list is not shared with any other business on Xeruvi.

Who else sees it

Only the service providers we need to run the product. Each one will be named here with what it handles and where it is located, and the list will be kept current rather than left as a category.

• Mono, for read only bank data.
• Our hosting and database providers, for storing the product's data.
• Our email provider, for the messages we send you.
• The provider behind the assistant, for generating narration from figures we have already calculated.

Where it is stored

Some of these providers hold data outside Nigeria. The Act sets conditions on transfers of that kind. This section will name the countries involved, the safeguard we rely on for each, and what we do to keep the transfer lawful.

How long we keep it

This section will give a retention period for each category rather than a single sentence covering everything, because financial records and marketing contacts do not deserve the same treatment.

What you can ask us to do

Under the Nigeria Data Protection Act you can ask for a copy of your data, ask us to correct it, ask us to delete it, object to some uses of it, and ask for it in a form you can take elsewhere. This section will explain how to make each request, what we need from you to act on it, and how long we take.

It will also tell you how to complain to the Nigeria Data Protection Commission if you are not satisfied with our answer.

Changes to this page

We will date every version and tell you about anything that materially changes what we do with your data, rather than quietly updating the page.