Key points
- We collect only what you choose to send us through our forms, email, WhatsApp or social channels, plus the limited technical data needed to run the website securely.
- We use your details to answer your enquiry, prepare quotations, deliver the services you sign up for and send updates you ask for.
- We do not sell personal data, and we do not use advertising or cross-site tracking cookies.
- Analytics stays off unless you accept it, and you can change your choice at any time.
- You can ask to access, correct or delete your data, or withdraw consent, by emailing hello@billsverse.com.
This summary is for convenience. The full text below is what applies.
1. Who we are and what this notice covers
This privacy notice explains how Misnova Technologies Limited (“Billsverse”, “we”, “us” or “our”) handles personal data when you visit billsverse.com, contact us, request a quotation, subscribe to updates, attend training or otherwise deal with us.
Billsverse is the trading name and product line of Misnova Technologies Limited, a company in Nigeria. For the personal data described in this notice, we are the data controller. That means we decide why and how the data is processed, and we are responsible for protecting it.
This notice is written to meet our obligations under the Nigeria Data Protection Act 2023 (the “NDPA”) and the General Application and Implementation Directive issued by the Nigeria Data Protection Commission (the “NDPC”).
What this notice does not cover
- Personal data your own customers give you when they use a Billsverse Nova storefront that you operate. You are the controller of that data. Our role is described in your licence agreement and any data processing terms attached to it, and summarised in our software licence.
- Websites, apps and social networks run by other organisations, including the payment gateways, VTU providers and social platforms we link to. Their own privacy notices apply.
2. How to contact us about privacy
If you have a question about this notice or want to exercise any of your rights, contact us:
- Email: hello@billsverse.com, with “Privacy request” in the subject line
- Company: Misnova Technologies Limited, trading as Billsverse
- Postal address: provided on request, so that formal notices can be served
We aim to acknowledge every privacy request within five business days.
3. The personal data we collect
We collect personal data in three ways: when you give it to us, when it is created automatically as you use our website, and occasionally when it reaches us from someone else.
Information you give us
| Where | What we collect |
|---|---|
| Contact, consultation and quote forms | Your name, email address, phone number (optional unless you ask for a callback), business stage, the service or plan you are interested in, and the message you write. |
| Support form | Your name, email address, product and version, the severity of the issue and your description of it, including any transaction reference you choose to include. |
| Training and growth forms | Your name, email address, phone number, your experience, the services you want, an indicative budget range and any notes you add. |
| Newsletter and resource requests | Your email address and, for resource requests, your name. |
| Email, WhatsApp and social media | Your name or handle, your contact details and whatever you choose to share in the conversation. |
| Quotations, contracts and invoices | Your business name, billing contact, billing address and the details we need to deliver the agreed scope and issue invoices. |
Information collected automatically
When you visit the website, our hosting provider receives the technical information every browser sends: your IP address, browser and device type, the page requested, the referring page, and the date and time. This is used to deliver pages, protect the website against abuse and diagnose faults.
Our forms use your IP address briefly, in memory, to limit repeated submissions and stop spam. The website does not write it to a database.
If you accept analytics, we also receive aggregated information about how the website is used, such as which pages are viewed, how visitors arrive and the type of device used. See section 8 and our cookie policy.
Information from other sources
If someone refers you to us, or you reach us through a partner or agency, they may pass on your name and contact details so that we can follow up. When preparing a quotation, we may also look at publicly available information about your business, such as your website or business social media pages.
Information we ask you not to send
Please never send passwords, one-time codes, API keys, bank card numbers or your customers’ payment details through our forms, email or chat. Our forms are designed to reject messages that appear to contain secrets. If you send this kind of information by mistake, tell us and we will delete it.
We do not knowingly collect sensitive personal data, such as information about health, religion, ethnicity or biometrics, and we ask that you do not include it in messages to us.
4. How we use your data and our lawful bases
The NDPA requires us to have a lawful basis for every use of personal data. The table below explains what we do with your data and the basis we rely on.
| Purpose | Lawful basis |
|---|---|
| Replying to enquiries, arranging consultations and preparing quotations | Steps taken at your request before entering into a contract, and our legitimate interest in responding to business enquiries |
| Delivering software, training, support and growth services under a contract | Performance of a contract |
| Issuing invoices, keeping accounting records and meeting tax obligations | Compliance with a legal obligation |
| Sending newsletters and resources you asked for | Consent, which you can withdraw at any time |
| Measuring website usage with analytics | Consent, given through Cookie settings |
| Keeping the website secure, preventing spam and abuse, and fixing faults | Legitimate interest in operating a secure and reliable website |
| Improving our services and content using aggregated enquiry trends and feedback | Legitimate interest |
| Establishing, exercising or defending legal claims | Legitimate interest and, where applicable, legal obligation |
Where we rely on legitimate interests, we have weighed them against your rights and expectations and concluded that the processing is necessary and proportionate. You can object to it at any time, as explained in section 9.
Marketing messages
We send marketing emails only if you subscribed or asked for a resource, or if you are an existing customer and the message is about similar services. Every marketing email includes a way to unsubscribe. Replying “unsubscribe” or emailing hello@billsverse.com also works, and we will stop promptly.
Automated decision-making
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects for you.
6. International transfers
Some of our service providers, including our website host, store or process data outside Nigeria, for example in the European Union or the United States.
When personal data leaves Nigeria, we rely on the cross-border transfer grounds in Part VIII of the NDPA. These include transfers to countries with an adequate level of protection and transfers protected by binding contractual safeguards, or, where appropriate, your consent or the performance of a contract with you. You can ask us for more information about the safeguards that apply to your data.
7. How long we keep it
We keep personal data only for as long as we need it for the purpose it was collected for, including to meet legal, accounting and reporting requirements.
| Data | How long we keep it |
|---|---|
| Enquiries that do not lead to a contract | Up to 24 months after our last contact, so that we can pick up the same conversation, unless you ask us to delete it sooner |
| Customer contracts, invoices and related correspondence | For the length of the contract and up to six years after it ends, to meet tax, accounting and limitation obligations |
| Support requests | For the life of the customer relationship, then up to 24 months |
| Newsletter subscriptions | Until you unsubscribe. We then keep only a suppression record so that we do not email you again |
| Server and security logs held by our host | For the short period set by the hosting provider, typically days to weeks |
| Your cookie choice | On your own device, until you change it or clear your browser data |
When a retention period ends, we delete the data or anonymise it so that it can no longer identify you.
9. Your rights
Under the NDPA you have the following rights. Some apply only in certain circumstances, but we will always explain our decision on a request.
- Right to be informed: to receive clear information about how we use your data, which is the purpose of this notice.
- Right of access: to ask for a copy of the personal data we hold about you.
- Right to rectification: to ask us to correct inaccurate or incomplete data.
- Right to erasure: to ask us to delete your data where it is no longer needed, or where you withdraw consent and no other basis applies.
- Right to restrict processing: to ask us to pause using your data while a concern is resolved.
- Right to data portability: to receive data you gave us in a structured, commonly used format, or have it sent to another organisation.
- Right to object: to object to processing based on legitimate interests, and to object at any time to direct marketing.
- Right to withdraw consent: where we rely on consent, you can withdraw it at any time. This does not affect processing that took place before you withdrew it.
- Rights related to automated decisions: not to be subject to decisions based solely on automated processing that significantly affect you.
How to make a request
Email hello@billsverse.com with “Privacy request” in the subject line and tell us which right you want to exercise. We may ask for information to confirm your identity before we act, so that we never disclose data to the wrong person. We do not charge a fee unless a request is clearly unfounded or excessive.
We will respond within 30 days. If a request is complex, we may need longer, and we will tell you why and when to expect a full answer.
Complaints
If you are unhappy with how we have handled your data, please tell us first so that we can try to put it right. You also have the right to lodge a complaint with the Nigeria Data Protection Commission at ndpc.gov.ng.
10. How we protect your data
We use technical and organisational measures appropriate to the risk, including:
- Encrypted connections (HTTPS) across the whole website
- Access to personal data limited to staff and contractors who need it, under confidentiality obligations
- Form protections against spam and automated abuse, and filters that reject messages containing passwords or keys
- Reputable service providers with their own security controls and certifications
- Regular review of who has access to our systems and accounts
No system is completely secure. If a personal data breach occurs that is likely to put your rights at risk, we will notify the NDPC within 72 hours of becoming aware of it, as the NDPA requires, and we will tell you without undue delay where the breach is likely to result in a high risk to you.
11. Children
Our website and services are intended for adults who run or are planning a business. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
12. Other websites
Our website links to other sites, including payment gateways, VTU providers, our social media profiles and Linktree. We are not responsible for their privacy practices. Please read their privacy notices before sharing personal data with them.
13. Changes to this notice
We may update this notice from time to time. The version number and effective date at the top of the page show when it last changed, and earlier versions remain available through their permanent links. If we make a significant change, we will highlight it on the website and, where appropriate, tell you by email.