Privacy Policy

1. Who is responsible

For account data, billing data, and data about how you use the website and the app, LuliChat is the controller. Contact support@lulichat.com.

For your customers' messages, contact details, and files that you store in the workspace, you are the controller. LuliChat processes that information on your instructions so the product can deliver tickets, calls, campaigns, and related features. You must have a lawful basis for collecting it and you must tell your customers how you use it.

2. Information we collect

Account and company

• First name, last name, and optional middle name of the owner
• Company name, country, and email address
• Password, stored in a form we cannot read back as the original password
• Email verification status, session tokens, and two-factor settings if you turn them on
• Teammates you invite, their names, emails, and roles

Billing

• Plan, billing period, subscription status, and change history
• Invoice amount, VAT, status, due date, and the payment reference returned by GlobalPay
• We do not store your full card number. Card payments are handled by GlobalPay.

Workspace content

• Tickets and the messages in them, including messages from connected channels
• Contacts, leads, tags, quick responses, and campaign lists
• Files you upload, within the storage on your plan
• Call records where the call center is used
• Internal chat, kanban tasks, and announcements
• Prompts and outputs you send through AI features, counted against your token allowance

Connected channels

If you connect WhatsApp, a Facebook Page, Instagram, Telegram, email, or SMS, we receive the identifiers and the conversation data that the connection needs. For Facebook and Instagram, that is the Page access you grant, such as Page messages and basic Page information. We do not post to those Pages unless you use a feature that sends a message you started. You can disconnect a channel from the workspace.

Technical data

• IP address, browser, and device information used to keep sessions secure
• Log data about sign-in and product errors
• Cookies described in section 6

3. Why we use it

• To create the company account and authenticate your team
• To provide tickets, channels, calls, campaigns, AI, and the other features on your plan
• To calculate invoices, collect payment, and record why a subscription changed
• To send verification email, invoice notices, and service messages
• To detect abuse, secure the service, and fix faults
• To understand product usage in aggregate so we can improve it
• To meet tax, accounting, and other legal duties

We do not sell personal information. We do not use your customer messages to train public AI models.

4. Who we share it with

• GlobalPay, to take subscription payments and return a payment result
• Channel providers you connect, including WhatsApp, Meta for Facebook and Instagram, Telegram, and email or SMS providers, so messages can be delivered
• Infrastructure providers that host the application, store files, and send email, under duties to protect the data
• Authorities when the law requires us to disclose information

Teammates in your company can see workspace content according to the roles you set. That sharing is under your control.

Some providers may process information outside Nigeria. Where that happens, we use providers that offer contractual protection appropriate to the Nigeria Data Protection Act.

5. How long we keep it

We keep account and workspace data while the company account is open and you use the service. Invoices and payment records are kept for the period tax and accounting law requires after the invoice is issued.

If you ask us to close the account, we delete or anonymise personal information that we are not required to keep. Backups may retain copies for a limited time before they expire. Disconnecting a channel stops new messages from that channel. Existing tickets remain until you delete them or the account is closed.

6. Cookies

We use cookies and similar storage to keep you signed in, to remember preferences such as language, and, if you allow it, to understand which pages are used. The website asks for that choice before analytics cookies are set. Necessary cookies still run so the site can load. The auth service uses a session cookie so the workspace can recognise a signed-in user. You can block cookies in the browser. Sign-in and checkout will not work without the cookies those flows require.

7. Security

We use access controls, encrypted transport, and protected password storage. No online service can promise that unauthorised access will never happen. Use a unique password, turn on two-factor authentication when you want a second check, and limit admin seats to people who need them.

8. Your rights

Subject to the Nigeria Data Protection Act, you may ask us to:

• Confirm whether we hold your personal information and to access it
• Correct information that is inaccurate
• Delete information we are not required to keep
• Object to or restrict certain processing
• Receive a copy of account information you provided, where that is applicable

Email support@lulichat.com from the address on the account. We may need to confirm you control that account before we act. If your request is about a message a business sent you through LuliChat, contact that business first. They decide how their customer conversations are handled. You may also complain to the Nigeria Data Protection Commission.

9. Children

Company accounts are for people who are 18 or older. We do not knowingly register children. If a business's own customers include children, that business is responsible for the lawful handling of those conversations.

10. Changes

We will post updates on this page and change the date at the top. If a change materially affects how we use account data, we will notify the account email or show a notice in the product.

11. Contact

Privacy questions: support@lulichat.com. Product steps are on the help page. The rules of use are in the Terms and Conditions.