Legal
Privacy Policy
Last updated: October 3, 2026 · Effective: July 1, 2026
EngageIQ is fully compliant with the Nigerian Data Protection Regulation (NDPR) and the EU General Data Protection Regulation (GDPR). We take your privacy seriously and are committed to transparency about how we collect, use, and protect your information.
Table of Contents
1. Who We Are
EngageIQ Ltd. ("EngageIQ", "we", "us", "our") operates the EngageIQ customer engagement platform. We are registered in Nigeria and based in Lagos, Nigeria. For data protection purposes, EngageIQ is the data controller for information collected from users of our Service, and acts as a data processor for personal data our customers submit about their own contacts.
2. Information We Collect
We collect information you provide directly (account registration details such as name, email, and organization name), information generated by your use of the Service (log data, IP addresses, device identifiers, usage analytics, and API request metadata), payment information processed by our payment providers (we do not store raw card numbers), and contact data you upload or sync to EngageIQ as part of using the Service.
3. How We Use Your Information
We use your information to provide, maintain, and improve the Service; to process payments and send billing communications; to send transactional emails such as password resets and security alerts; to provide customer support; to detect and prevent fraud and abuse; to comply with our legal obligations; and with your consent, to send product updates and marketing communications. We do not sell your personal data.
4. Lawful Basis for Processing
Under the NDPR and GDPR, we process your data on the following bases: contract performance (to provide the Service you signed up for), legitimate interests (to improve the Service, prevent fraud, and ensure security), legal obligation (to comply with applicable laws), and consent (for marketing communications, which you may withdraw at any time).
5. Your Contact Data
When you import or sync contacts into EngageIQ, you remain the data controller for that data. We process it on your behalf according to your instructions. You are responsible for ensuring you have lawful grounds to process your contacts' personal data, including obtaining appropriate consent for marketing communications in compliance with NDPR, GDPR, and applicable anti-spam laws.
6. Data Retention
We retain your account data for as long as your account is active. After account deletion, we retain data for 30 days to allow data export, then permanently delete it within 90 days. Contact data you upload is retained while you maintain an active subscription and deleted within 60 days of subscription termination unless you request earlier deletion.
7. Data Sharing
We share your data with third-party service providers that help us operate the Service, including cloud infrastructure providers (AWS), email delivery providers, payment processors (Paystack, Bachs, Stripe), and analytics tools. All sub-processors are contractually bound to protect your data. We do not share your data with third parties for their own marketing purposes.
8. International Data Transfers
EngageIQ stores and processes data primarily in Africa and Europe. Where we transfer data outside Nigeria, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as recognized under GDPR and similar mechanisms under NDPR.
9. Security
We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, access controls, regular security audits, and penetration testing. We are PCI-DSS compliant for payment processing. Despite our efforts, no system is 100% secure; we encourage you to use strong passwords and enable two-factor authentication.
10. Your Rights
Depending on your location, you may have the right to access, correct, delete, or export your personal data; to restrict or object to processing; and to withdraw consent at any time. To exercise these rights, email privacy@engagecl.com. We will respond within 30 days. Customers in Nigeria may also lodge complaints with the National Information Technology Development Agency (NITDA).
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes at least 30 days in advance by email or in-app notice. Continued use of the Service after changes take effect constitutes acceptance.
13. Contact Us
For privacy questions, data subject requests, or to report a concern, contact our Data Protection Officer at privacy@engagecl.com or write to EngageIQ Ltd., Attn: DPO, Lagos, Nigeria.