NairaLedger

Website Privacy Policy

NairaLedger Technologies Ltd · NL-PRIV-WEB-001 v1.0 · Effective 20 August 2026 · Privacy contact: privacy@nairaledger.com

1. Introduction

NairaLedger Technologies Ltd (“NairaLedger”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal data entrusted to us. This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you visit the website, join the EdgePlus early-access or waitlist programme, contact us, subscribe to communications, participate in surveys or research, engage with us as an investor, partner, advisor or other stakeholder, or otherwise interact with NairaLedger.

We process personal data in accordance with applicable data-protection requirements, including the Nigeria Data Protection Act 2023 (the “NDP Act”) and applicable directives and guidance issued by the Nigeria Data Protection Commission (“NDPC”). This policy currently relates primarily to the corporate website and pre-launch/early-access activities; additional notices may apply when EdgePlus enters production.

2. Who we are

NairaLedger Technologies Ltd is a technology company developing financial-management infrastructure and software for African businesses. Our flagship product, EdgePlus, is a cloud-based accounting and business-management platform for SMEs, self-employed professionals, accountants and advisors. For personal data collected directly through this website and our corporate activities, NairaLedger generally acts as the Data Controller. When EdgePlus becomes operational, NairaLedger may also act as a Data Processor on behalf of business customers, governed by appropriate data-processing arrangements.

3. Personal data we may collect

3.1 Identification and contact: name; email; telephone (where provided); organisation; professional role; and other contact information you provide.

3.2 Waitlist and early-access: name; email; country; company; customer/user category; whether you join as an SME, self-employed professional, accountant, advisor, investor or other stakeholder; products or services of interest; EdgePlus features of interest; how you heard about us; early-access preferences; communication preferences; and information voluntarily supplied through the form.

3.3 Communications: your name, email, organisation, the content of your enquiry, correspondence history and other information you provide.

3.4 Website and technical: subject to consent requirements, technical information such as IP address, browser and device type, operating system, referring/visited pages, dates and times, interactions, cookie identifiers, session and analytics information.

3.5 Research and product feedback: survey responses, business and professional information, product preferences, feedback, opinions and participation records.

4. How we collect personal data

Directly from you — e.g. when you complete the waitlist form, contact us, complete a questionnaire, register for an event, subscribe, or participate in research.

Automatically — certain technical information through essential technologies and, where permitted and consented to, analytics and similar technologies.

From third parties — in limited circumstances, from professional contacts, referral sources, partners, service providers or public professional sources where lawful.

5. Purposes and lawful bases

We process personal data only where there is an appropriate lawful basis, which may include:

Consent — e.g. early-access communications, product announcements, beta invitations, marketing, and optional analytics/tracking. You may withdraw consent at any time; withdrawal does not affect prior lawful processing.

Contract or steps at your request; Legal obligation; and Legitimate interests — such as protecting our systems, preventing fraud, maintaining records, responding to enquiries, improving the website and defending legal rights, where these do not improperly override your rights.

6. Early-access and waitlist communications

Joining the EdgePlus waitlist allows us to communicate about early-access opportunities, product-development updates, beta-testing invitations, launch announcements and related EdgePlus communications. Where investor, partnership or corporate communications constitute a materially different purpose, we may seek separate consent or rely on another lawful basis. You may unsubscribe or withdraw consent at any time.

7. Cookies and similar technologies

Some technologies are necessary for basic functionality, security or session management. Others, including certain analytics tools, are optional and used subject to consent — with choices to Accept All, Reject Non-Essential or Manage Preferences. See our Cookie Notice.

8. Service providers and data processors

We may engage trusted providers for hosting, cloud infrastructure, database services, authentication, transactional email, communications, analytics, cybersecurity, technical support and other technology services. Where a provider processes personal data on our behalf, we seek appropriate contractual, confidentiality, privacy and security safeguards, and maintain internal records of processors and sub-processors.

9. International transfers

Some providers may process or store information outside Nigeria. Where personal data is transferred internationally, we assess the transfer and seek to implement an appropriate lawful transfer mechanism and safeguards as required under applicable law.

10. Data retention

We retain personal data only for as long as reasonably necessary for the purpose collected, subject to legal, regulatory, contractual and legitimate business requirements. Waitlist and early-access information is periodically reviewed and deleted or anonymised when no longer required, subject to applicable retention requirements. We maintain an internal Data Retention Schedule.

11. Data security

We implement proportionate technical and organisational measures to protect personal data against unauthorised access, unlawful processing, accidental loss, destruction, alteration, disclosure and other inappropriate use. Measures may include encrypted communications, access and authentication controls, role-based access, logging and monitoring, secure development practices, backups, vendor-security assessments and incident management. No internet-based system can guarantee absolute security.

12. Your data-protection rights

Subject to applicable law, you may have the right to receive information about processing; access; correction; deletion; restriction; objection; withdrawal of consent; data portability; and rights relating to automated decision-making. Send requests to privacy@nairaledger.com. We may take reasonable steps to verify your identity first.

13. Complaints

If you have concerns about how we process your personal data, please contact privacy@nairaledger.com. You also have the right, where applicable, to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

14. Children's privacy

The website and EdgePlus early-access programme are intended for businesses, professionals, investors and other adult stakeholders. We do not intentionally solicit personal data from children, and will take appropriate action if we become aware that such data has been collected in circumstances requiring additional safeguards.

15. Automated decision-making

The current website and waitlist are not intended to make decisions producing legal or similarly significant effects solely through automated processing. If this changes, we will assess the processing and provide appropriate information and safeguards beforehand.

16. Third-party websites

Our website may link to third-party websites or services. We are not responsible for their privacy practices; please review the notices applicable to external websites before providing personal information.

17. Changes to this Privacy Policy

We may update this policy as our business develops, EdgePlus progresses toward production, our processing changes, providers change, or legal requirements evolve. The current version and effective date are shown on this page. Material revisions are issued as new versions so the policy history remains traceable.

18. Contact us

For privacy questions, data-subject requests, consent withdrawal, complaints or other data-protection enquiries: NairaLedger Technologies Ltd, privacy: privacy@nairaledger.com, website www.nairaledger.com. For general business enquiries, please use the contact information on our website.