Effective Date: March 2026 · Compliant with the Nigeria Data Protection Act (NDPA) 2023
At Foleio, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the Foleio platform. It is written in compliance with the Nigeria Data Protection Act, 2023 (NDPA) and applies to all users of Foleio, including creators, fans, and customers.
By using Foleio, you consent to the practices described in this Policy.
Foleio is the data controller responsible for your personal data. We determine the purposes and means of processing your data.
Contact: legal@foleio.com
[Insert full registered business name and address once CAC registration is complete]
Information you provide directly:
Information we collect automatically:
Information from third parties:
We do not sell your personal data. We share data only in the following circumstances:
Service Providers: We share data with trusted third-party providers who process data on our behalf, including Paystack (payments), Mux (video hosting), Cloudflare (storage and CDN), Supabase (auth and database), Resend (email delivery), and Sentry (error monitoring). All providers are contractually bound to process data only as instructed by Foleio.
Between Creators and Fans: Certain information is necessarily shared - for example, a creator can see the name, email, and phone number of customers who book their services. By using the Platform, you consent to this limited sharing as necessary to deliver the services you have requested.
Legal Requirements: We may disclose your data where required by law, court order, or government authority, including the Nigeria Data Protection Commission (NDPC).
Business Transfers: In the event of a merger or acquisition, your data may be transferred as part of that transaction. We will notify you before your data is transferred.
After these periods, data is securely deleted or anonymised.
To exercise any of these rights, contact us at legal@foleio.com. We will respond within 30 days.
We implement appropriate technical and organisational measures to protect your personal data, including encryption of data in transit (HTTPS/TLS) and at rest, access controls, regular security assessments, and secure third-party infrastructure. In the event of a data breach that poses a risk to your rights, we will notify the NDPC within 72 hours and affected users without undue delay, as required by the NDPA 2023.
Foleio uses cookies to maintain your session and authentication state (essential), remember your preferences (functional - with your consent), and analyse Platform usage through anonymised analytics (with your consent). You can manage your cookie preferences at any time through our cookie banner or by contacting us.
Foleio is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a child under 18 has provided us with personal data, we will delete such data promptly. Contact us at legal@foleio.com if you believe a minor has provided us with data.
Some of our service providers (including Cloudflare, Mux, and Supabase) may process or store data outside Nigeria. Where we transfer data internationally, we ensure appropriate safeguards are in place in accordance with Section 42 of the NDPA 2023. We will not transfer your data to countries without adequate data protection laws without your explicit consent.
We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting a notice on the Platform. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy.
Email: legal@foleio.com
Website: www.foleio.com
[Insert full address once CAC registration is complete]
If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.