Privacy & data

Privacy Policy

How account, storefront, prospect, Gmail and AI-related information is handled.

Last updated: 4 September 2026

1. Who this policy covers

AllNaBusiness is operated in Nigeria by Jackson Godwin. This Privacy Policy explains how AllNaBusiness handles personal information when you create or use an account, use AI or prospect tools, connect a mailbox, publish a storefront, contact support, or interact with a storefront hosted on the platform.

A business that uses an AllNaBusiness storefront is separately responsible for how it uses customer inquiries, bookings, orders and other customer information it receives. AllNaBusiness acts as the platform provider for that activity.

2. Information we collect

We collect information you choose to provide, such as your name, email address, phone number, business profile, products and services, goals, tasks and results, sales or expense records, leads, bookings, storefront content, support messages and files you upload. Storefront visitors may provide contact, inquiry, booking, order, delivery and payment-related information.

We also process limited technical and security information such as account identifiers, sign-in events, feature activity, error information, device or browser information sent with web requests, request identifiers and security logs.

Prospect Discovery may process information that is publicly available on websites, public social profiles, directories and search results. A prospect record may include a public name, organisation, role, location, public contact route and the public evidence used to assess relevance and recency.

3. Why we use information

We use information to create and secure accounts; provide workspaces, storefronts, bookings, orders, business records and prospect tools; process support requests; send requested service communications; prevent abuse and fraud; maintain records; improve reliability; and comply with legal obligations.

Depending on the activity and applicable law, processing may be based on performing a contract with you, your consent, compliance with law, or legitimate interests such as securing and improving the service. Where consent is the basis, you may withdraw it for future processing.

4. AI and automated assistance

Coach Amaka and related AI features may use selected business profile details, offers, goals, progress and bounded learning summaries to generate advice, plans and drafts. That bounded context may be sent to an AI service provider, currently Google Gemini. Raw personal task wording is not intended to become a shared learning library merely because you entered it.

AI suggestions may be incomplete or wrong and are not legal, accounting, tax, employment, medical or other professional advice. AllNaBusiness does not use AI to make legal or similarly significant decisions about a person without appropriate human involvement. See the AI & Automation Policy.

5. Connected Gmail and outreach

If you deliberately connect Gmail for one-to-one prospect outreach, Google may grant the permissions needed to send messages and check replies. We may store the connected address, an encrypted long-term permission token, conversation/thread identifiers and messages needed to manage those prospect conversations. We do not receive your Gmail password, sell mailbox information or use it for advertising.

The outreach agent is intended to work with prospect conversations created through AllNaBusiness rather than create a general copy of your inbox. You may disconnect the mailbox, and a prospect may say NO or ask the sender to stop; automated follow-up must then stop for that conversation.

6. Service providers and disclosures

We use providers where needed to operate the service. Depending on the feature, these may include Cloudflare for data, security and delivery; Vercel for application hosting and server routes; Google Firebase for authentication; Google Gmail APIs for mailboxes a user connects; Google Gemini for AI assistance; Tavily and public web sources for fresh prospect research; Brevo for transactional email; Cloudinary for authenticated media storage; and Paystack for payments.

We may also disclose information where required by law, to protect users or the service, in a properly managed business transfer, or when you direct us to do so. We do not sell private business profiles or personal information to advertisers.

7. Storage and cross-border processing

Business records are designed to be stored in the Cloudflare data layer, while Firebase is used for authentication. Some information may be cached in your browser to make the app responsive. Providers may process information outside Nigeria.

Where the Nigeria Data Protection Act or another applicable law requires safeguards for a cross-border transfer, we use an appropriate legal mechanism or provider safeguard for that transfer. No policy statement removes rights that cannot lawfully be waived.

8. Public storefronts and public prospect evidence

Information you deliberately publish on a storefront is public and can be copied, indexed or shared by others. Customer inquiry, booking and order information is available to the business receiving it and to AllNaBusiness as platform provider where needed to operate the service.

Public prospect information is a research lead, not a guarantee of identity, interest, suitability or accuracy. AllNaBusiness should not rewrite a prediction as though the prospect explicitly said they want to buy. A person may ask us to correct or remove a prospect record concerning them.

9. How long we keep information

We keep active account and workspace information while the account is open and only as long afterward as reasonably needed for the service, security, fraud prevention, disputes, audit, payment or legal obligations. Different records have different retention needs.

After a verified deletion request, eligible active account data is removed or scheduled for deletion. Some payment, security, legal, dispute, fraud-prevention, audit or backup records may need to be retained for a lawful period and then deleted or anonymised.

10. Your privacy rights and choices

Depending on applicable law and the circumstances, you may have rights to request access, correction, deletion, restriction, objection, data portability, withdrawal of consent and information about how your personal data is used. We may need to verify identity before acting on a request and some rights have lawful exceptions.

You may also complain to the Nigeria Data Protection Commission. To make a request, email jacksongodwinking@gmail.com with “Privacy request” in the subject.

11. Security

We use access controls, tenant separation, encrypted network connections, restricted server secrets, rate limits, security headers, logging and other safeguards intended to protect information. No online service can promise perfect security. Please report suspected misuse promptly through Support.

12. Children

AllNaBusiness is intended for business owners and working professionals and is not directed to children under 18. Do not create an account for a child or submit a child's personal information unless a lawful adult or organisational basis applies.

13. Changes to this policy

We will update the “Last updated” date when this policy changes. Where required, we will provide reasonable notice before a material new use of personal information takes effect.

14. Contact and complaints

Privacy questions and rights requests: jacksongodwinking@gmail.com. You may also contact the Nigeria Data Protection Commission through its official channels. For ordinary product help, use Support.