When you use our website or platform, you trust us with information about you. This policy explains what personal data we collect, why we collect it, who we share it with, and the choices and rights you have.
1. Who we are
Lead Bird is a customer engagement platform that lets businesses talk to their customers on WhatsApp and other messaging channels. It is operated by Lead Bird Technologies, a business name registered with the Corporate Affairs Commission of Nigeria (registration number RN9622070), with its principal place of business at 7 Tiamiyu Savage Street, Victoria Island, Lagos State, Nigeria (“Lead Bird”, “we”, “us” or “our”).
We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and the regulations of the Nigeria Data Protection Commission (NDPC). For any privacy or data protection question, contact our privacy team at hello@leadbird.app.
2. Our two roles
- Controller. For information about visitors to our website, people who contact us or request a demo, and the people who sign up for and use Lead Bird accounts, we decide how and why the data is used. This policy covers that data.
- Processor. Our customers use Lead Bird to store and send messages to their own contacts. For that data (“Customer Data”), the business using Lead Bird is the controller and we process it only on their instructions, under our Terms and Data Processing Agreement. If you received a message from a business that uses Lead Bird, please contact that business about your data. We will help them respond to your request.
3. What we collect and why
| When | What we collect | Why we use it | Lawful basis |
|---|---|---|---|
| You book a demo | Name, business email, country, WhatsApp number, team size, and your marketing preference | To arrange and run your demo and follow up | Legitimate interests; consent for marketing emails |
| You create an account | First and last name, business email, password (stored only as a secure hash), phone number and country, how you heard about us, and your marketing preference | To create and manage your account, provide the service, and keep it secure | Contract |
| You log in or reset your password | Email address, IP address, time of failed attempts, and one-time reset links (stored only as a hash) | To protect accounts from unauthorised access and abuse | Legitimate interests |
| You subscribe to our newsletter | Email address | To send you our newsletter | Consent |
| You request an eBook | Name, email, company (optional), the eBook requested | To send the eBook you asked for and, with your agreement, related updates | Consent |
| You use our WhatsApp chat link or chat button generator | Business email, WhatsApp number and, for the chat button, your brand name (welcome messages aren’t stored) | To provide the tool and follow up about Lead Bird. You can object at any time | Legitimate interests |
| You visit a website that uses our WhatsApp chat widget | The widget script is loaded from our servers, so we receive your IP address, browser details and the page address in our server logs. The widget sets no cookies | To deliver the widget and keep it secure | Legitimate interests |
| You ask us for a new integration | Email and the integration name | To let you know when it is available | Legitimate interests |
| You buy a paid plan | Company name, billing address, Tax Identification Number (TIN), payment details (handled by our payment provider Flutterwave, we don’t store card numbers) | To take payment, invoice you and meet tax obligations | Contract; legal obligation |
| You use the platform | Usage and log information such as features used, device and browser type, IP address and error logs | To run, support, secure and improve the service | Legitimate interests |
| You contact us | Your name, contact details and what you tell us | To reply and help you | Legitimate interests |
| You visit our website | IP address, browser and request details recorded in server logs | To deliver the website and keep it secure | Legitimate interests |
All of our forms record the date and the IP address the form was sent from, to help us prevent spam and abuse. We only send marketing emails if you ticked the box to receive them, and every email includes a way to unsubscribe.
4. WhatsApp and the Cloud API
Lead Bird sends and receives WhatsApp messages through the WhatsApp Business Platform (Cloud API), operated by Meta. When a customer sends a message using Lead Bird, the message, the recipient’s phone number and related information pass through Meta’s systems, which may store them temporarily to deliver them. Meta’s handling of that data is described in its WhatsApp Business Data Processing Terms and WhatsApp Privacy Policy.
If a business uses bulk WhatsApp messaging, we store the contact list it adds (names and WhatsApp numbers), whether each person has opted out, and the delivery status of each message, so we can send its broadcasts and honour opt-outs. We process this on the business’s behalf. If you receive a broadcast from a business and no longer want them, reply STOP and you will not receive further broadcasts from that business.
5. AI features
If you use AI features such as Hannah, the information you provide and the content generated are processed to provide the feature. We use OpenAI as a sub-processor to do this. OpenAI processes this data in the United States and does not use data sent through its API to train its models. You can choose not to use AI features.
7. International transfers
Some of our service providers process data outside Nigeria. When that happens, we make sure the transfer meets the requirements of the Nigeria Data Protection Act 2023, for example by relying on an adequacy decision of the Nigeria Data Protection Commission, binding corporate rules, or contractual clauses that give your data the same level of protection. Our hosting is located in Germany, in the European Union.
8. How long we keep data
| Data | How long |
|---|---|
| Account information | While your account is open, then 12 months after it closes |
| Customer Data (contacts, messages) | While the subscription is active, then deleted within 90 days, as set out in our Terms |
| Billing and invoices | 6 years, to meet Nigerian tax and accounting rules |
| Demo, eBook and integration requests | 24 months from your last contact with us |
| Newsletter subscription | Until you unsubscribe |
| Failed login records | 30 days |
| Password reset links | Expire after 60 minutes and are deleted once used or replaced |
9. How we protect data
We use technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS), passwords stored only as strong one-way hashes, one-time reset links, limits on repeated login attempts, access controls that restrict data to people who need it, and configuration files kept outside the public website. No system is completely secure, so if you think your account has been compromised, please contact us straight away.
10. Your rights
Under the Nigeria Data Protection Act 2023 you have the right to:
- access the personal data we hold about you;
- correct data that is inaccurate or incomplete;
- delete your data in certain circumstances;
- restrict how we use your data in certain circumstances;
- data portability, to receive your data in a structured, machine-readable format;
- object to processing based on legitimate interests, and to direct marketing at any time; and
- withdraw consent at any time, where we rely on consent.
To use any of these rights, contact us using the details in section 14. We will respond within 30 days, and may need to confirm your identity first. If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission, although we would appreciate the chance to help first.
12. Children
Lead Bird is a business service and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. We will change the “last updated” date above and, for significant changes, let account holders know by email or in the platform.
14. Contact us
For questions about this policy or to use your rights, contact us at hello@leadbird.app or write to Lead Bird Technologies, 7 Tiamiyu Savage Street, Victoria Island, Lagos State, Nigeria.
