Privacy Policy

One Digital NG (RC 1859275, Lagos, Nigeria) is the data controller for Investo (investo.ng) under the Nigeria Data Protection Act 2023 (NDPA). Contact for anything in this policy: femi@onedigital.ng.

• Account data, your email address and sign-in records.
• Content you create, watchlists, portfolios (figures you enter yourself), questions you ask, chat history, investment memos, notes, and feedback you submit. Private to your account.
• Usage data, product events such as pages opened, stocks viewed, searches, and questions asked, used to understand what works and what fails.
• Technical data, IP address and device information in server logs, used for security and rate-limiting.

Investo holds no money and takes no payments, so we have no reason to ask for, and never collect, your BVN, NIN, bank account details, card numbers, or any government identity document. During free early access we hold no payment data of any kind. Anyone requesting these in Investo's name is not us.

• to provide the service: your account, your saved work, your answers;
• to answer your questions, which involves AI processing (section 5);
• to send emails you signed up for (market digests and product updates), every one of which carries a working unsubscribe;
• to keep the service secure and prevent abuse;
• to improve the product, using aggregated usage patterns.

We do not sell your personal data, and we do not share it with advertisers. Lawful bases under the NDPA: performance of our contract with you, your consent (emails), and our legitimate interest in securing and improving the service.

When you ask Investo a question, the question and relevant market context are processed by Anthropic's Claude API to generate the answer. We do not use your data to train AI models. Avoid typing sensitive personal information into Ask; it is a market-research tool and does not need it.

Investo runs on a small set of infrastructure providers acting as processors under our instructions: Supabase (database and authentication), Vercel (hosting), Resend (email delivery), and Anthropic (AI processing). Some of these process data outside Nigeria (EU and US regions); where they do, the transfer is protected by the providers' contractual safeguards in line with the NDPA's cross-border provisions.

We use cookies for sign-in sessions and browser storage for preferences: theme, answer style, and similar. We run no third-party advertising trackers. Blocking cookies will break sign-in; nothing else depends on them.

Account data and your saved work are kept while your account is active. Server logs rotate on our providers' standard schedules. When you delete your account, your personal data and private content are deleted, allowing a short window for backups to cycle out. Aggregated, de-identified statistics (for example, "most-asked questions") may be retained.

Under the NDPA you can:

• ask what personal data we hold about you, and get a copy;
• correct inaccurate data;
• delete your account and data;
• object to or restrict processing, and withdraw consent (e.g. unsubscribe);
• complain to the Nigeria Data Protection Commission if you believe we have handled your data unlawfully.

Write to femi@onedigital.ng and we will respond within the timelines the NDPA requires.

Data is encrypted in transit, access to private content is enforced at the database level per account, and administrative access is restricted. No system is perfectly secure; if a breach affects your data we will notify you and the Commission as the NDPA requires.

Investo is not directed at, and may not be used by, persons under 18.

If this policy changes materially we will say so in the product or by email, and update the effective date above.