Privacy Policy

This Privacy Policy explains how Xaund Tech processes personal data when you visit our website, create an account, use the Growth Hub or client portal, submit forms, use our AI assistant or free tools, book a consultation, receive services, or otherwise interact with us.

Depending on how you use the website, we may collect your name, email address, telephone number, company information, account credentials and profile details, consultation and contact messages, Growth Audit responses and results, project and deliverable information, invoice information, payment-proof files, files you choose to upload, booking details, chatbot messages, marketing preferences, and technical information such as device/browser data, referring pages, UTM parameters, security logs and an IP-derived identifier used for anti-abuse controls.

We use personal data to provide the website and portal, create and secure accounts, respond to enquiries, deliver marketing and consulting services, manage projects and deliverables, issue and manage invoices, verify payment evidence, schedule calls, provide requested tools and audits, send transactional messages, improve our services, measure website performance, prevent abuse and fraud, maintain records, and comply with applicable legal obligations.

Where applicable, we process personal data on the basis of your consent, steps taken at your request before entering into a contract, performance of a contract, compliance with legal obligations, and our legitimate interests in operating, securing and improving Xaund Tech where those interests do not override your rights.

We use Google Tag Manager to manage analytics and marketing tags. The specific services deployed through GTM may change over time. Where required, non-essential analytics or marketing technologies should be activated only in accordance with the consent choices presented on the website. You can also control cookies through your browser settings.

We may use service providers such as Supabase for authentication, database and file storage; Vercel for website hosting; Resend for transactional email; Google for Calendar and Meet bookings; Google Tag Manager and analytics technologies; Cloudflare Turnstile for bot protection; and an AI model provider for the Ask Xaund assistant. These providers may process data in countries outside Nigeria. We will use appropriate contractual, technical and organisational safeguards where cross-border processing requires them.

If you use Ask Xaund, your messages may be processed to generate a response and may be retained for service quality, security and lead follow-up where you voluntarily provide contact details. Do not submit passwords, payment-card details, sensitive personal information or confidential third-party information through the chatbot.

Client-only project information, deliverables, assets, invoices and payment proofs are restricted to authorised accounts and Xaund Tech administrators. Payment proof is used to verify a payment; uploading proof does not itself mark an invoice as paid. Xaund Tech verifies payment before the invoice status is changed to paid.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, to provide services, maintain business and financial records, resolve disputes, enforce agreements and meet legal requirements. Retention periods differ by data category. We may anonymise information that no longer needs to identify you.

We use access controls, server-side authentication, database row-level security, restricted storage policies, input validation, anti-bot controls, rate limiting, encryption provided by our infrastructure providers, and administrative safeguards. No online system can be guaranteed to be completely secure, so you should also protect your password and account access.

Subject to applicable law, you may have rights to be informed about processing, access your personal data, request correction, object to or restrict certain processing, request deletion where applicable, request portability, withdraw consent where processing relies on consent, and complain to the competent data protection authority. We may need to verify your identity before acting on a request.

Xaund Tech intends to handle personal data consistently with the Nigeria Data Protection Act 2023 and applicable guidance of the Nigeria Data Protection Commission, including the NDP Act General Application and Implementation Directive (GAID) 2025 where applicable to our activities.

The website and services are intended for business users and are not directed to children. If you believe a child has provided personal data without appropriate authorisation, contact us so we can review and, where appropriate, remove it.

We may update this Privacy Policy as our services, technology or legal obligations change. The latest version will be posted on this page with an updated effective date.

For privacy questions or requests, contact info@xaundtech.com.ng, call 08145648858, or write to Baale Street, Aseese, Ogun State, Nigeria.