Privacy Policy

Account Information

When you create a Loop56 account, we collect your full name, email address, phone number, business name, and business address. This information is necessary to provide our POS, invoicing, and business management services.

Transaction Data

We process and store records of sales transactions, invoices, payment details, customer purchases, and inventory changes made through your Loop56 dashboard. This data is essential for generating reports, analytics, and maintaining accurate business records.

Financial Information

To facilitate payments and settlements, we collect your bank account details (account number, bank name) through our integration with Flutterwave and Providus Bank. We do not store full card numbers on our servers.

Device & Usage Data

We automatically collect device type, browser version, IP address, pages visited, feature usage patterns, and session duration. This helps us improve performance, diagnose issues, and enhance the user experience.

WhatsApp & Social Media Data

If you enable our AI sales assistant integration, we process messages exchanged between your business and customers on WhatsApp, Instagram, and Facebook Messenger to facilitate automated responses, product recommendations, and order processing.

We use the information we collect to:

• Provide, operate, and maintain your Loop56 POS system, online storefront, and business dashboard
• Process transactions, generate invoices, and manage your business wallet and settlements
• Power our AI sales assistant to respond to customer inquiries in English, Pidgin, Yoruba, Igbo, and Hausa
• Generate business analytics, sales reports, and inventory insights
• Send transactional notifications (order confirmations, payment receipts, low-stock alerts)
• Improve our platform through aggregated, anonymised usage analytics
• Comply with Nigerian tax regulations (VAT, WHT) and generate compliant financial records
• Prevent fraud, detect security threats, and enforce our Terms of Service
• Communicate product updates, new features, and service announcements (you can opt out at any time)

Payment Processors

We share necessary transaction data with Flutterwave and Providus Bank to process payments and settlements. These providers have their own privacy policies governing how they handle your data.

AI & Communication Services

Messages processed through our AI sales assistant are sent to OpenAI for natural language processing. We do not share your financial data or personal identification details with AI providers. WhatsApp messages are processed through the official WhatsApp Business API.

Legal Requirements

We may disclose your information if required by Nigerian law, court order, or government regulation. This includes compliance with the Nigeria Data Protection Regulation (NDPR) and requests from the Federal Inland Revenue Service (FIRS) for tax compliance.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the business. We will notify you of any such change and any choices you may have regarding your data.

What We Never Do

We never sell your personal data or business information to third-party advertisers. We never share your customer lists, sales data, or financial records with competitors. Your business data belongs to you.

We take the security of your data seriously and employ industry-standard measures to protect it:

• AES-256 encryption for data at rest across all databases and storage systems
• TLS 1.3 encryption for all data in transit between your device and our servers
• Regular penetration testing and vulnerability assessments by third-party security firms
• Role-based access controls within our organisation — only authorised personnel can access customer data
• Automated monitoring and alerting for suspicious activity or unauthorised access attempts
• Secure, Tier-3 data centre hosting with 99.9% uptime SLA, physical access controls, and redundant systems

While we strive to protect your data using commercially reasonable measures, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and enable all available security features on your Loop56 account.

Essential Cookies

We use essential cookies and browser local storage to maintain your authenticated session, store your authentication token (with a 15-hour lifetime), and remember your dashboard preferences. These are necessary for the platform to function correctly.

Analytics

We use anonymised analytics to understand how users navigate Loop56, which features are most popular, and where we can improve. This data is aggregated and cannot be used to identify individual users.

Managing Cookies

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging into Loop56. Clearing local storage will require you to log in again.

Under the Nigeria Data Protection Regulation (NDPR) and applicable data protection laws, you have the following rights:

• Right of access — Request a copy of all personal data we hold about you and your business
• Right to rectification — Request correction of inaccurate or incomplete data in your account
• Right to erasure — Request deletion of your account and associated data (subject to legal retention requirements)
• Right to data portability — Export your business data (products, sales, customers) in standard formats (CSV, JSON)
• Right to object — Object to processing of your data for marketing purposes at any time
• Right to restrict processing — Request that we limit how we use your data in specific circumstances

To exercise any of these rights, contact us at privacy@loop56.com. We will respond to verified requests within 30 days. You may also lodge a complaint with the National Information Technology Development Agency (NITDA) if you believe your data rights have been violated.

We retain your data for as long as your Loop56 account is active and as needed to provide our services. Specific retention periods include:

• Account information — retained while your account is active, deleted 90 days after account closure
• Transaction records — retained for 6 years to comply with Nigerian tax and financial regulations
• AI conversation logs — retained for 12 months for service improvement, then automatically anonymised
• Usage analytics — aggregated and anonymised data may be retained indefinitely for product improvement
• Support tickets — retained for 2 years after resolution for quality assurance purposes

When data is deleted, it is permanently removed from our active databases and backup systems within 30 days.

Loop56 is a business management platform designed for registered businesses and adult users. We do not knowingly collect personal information from individuals under the age of 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@loop56.com and we will promptly delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you via email and display a prominent notice on your Loop56 dashboard at least 14 days before the changes take effect. Your continued use of Loop56 after the effective date constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact our Data Protection Officer:

• Email: privacy@loop56.com
• Support: support@loop56.com
• Phone: +234 (0) 700-LOOP56
• Address: Lagos, Nigeria