Privacy Policy

Builtrly Technologies Ltd (“Builtrly,” “we,” “us,” or “our”) operates the Builtrly platform — a business management and e-commerce solution available at builtrly.app and its subdomains. We are committed to protecting the privacy and personal data of our merchants, their customers, and all visitors to our platform.

This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, and the choices and rights you have regarding your data. By accessing or using Builtrly, you acknowledge that you have read and understood this policy.

Builtrly is incorporated and operates primarily in Nigeria. Where applicable, we aim to comply with the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation 2019 (NDPR), and other relevant data protection laws.

We collect information in the following categories:

2.1 Information You Provide Directly

• Account registration data: Full name, email address, phone number, business name, and password when you create a Builtrly account.
• Business profile data: Store name, product listings, pricing, product images, business category, and store description.
• Payment and billing data: Bank account details for payout, billing contact information, and subscription tier. We do not store card numbers — these are handled securely by our integrated payment processors under their PCI-DSS compliance obligations.
• Support communications: Messages, attachments, and information you send when you contact our support team.
• User-generated content: Blog posts, product descriptions, store copy, and any other content created using our platform.

2.2 Customer Data Processed on Your Behalf

When your customers place orders on your Builtrly-powered store, we process data such as their name, delivery address, phone number, and email on your behalf as a data processor. You, the merchant, are the data controller for your customers' information. You are responsible for handling that data lawfully and in accordance with applicable privacy laws.

2.3 Information Collected Automatically

• Device and browser data: IP address, browser type, operating system, referring URLs, and device identifiers.
• Usage data: Pages visited, features used, time spent on the platform, and click-through paths.
• Cookies and tracking technologies: Session tokens, analytics cookies, and preference cookies. See Section 6 for full details.
• AI interaction logs: Prompts submitted to the Builtrly AI Agent feature are logged for quality assurance and service improvement purposes, subject to strict data handling controls.

Builtrly provides tools for merchants to run their businesses. When a merchant collects personal data from their end-customers (such as during checkout), the merchant acts as the Data Controller, and Builtrly acts solely as a Data Processor on their behalf.

• Merchant Privacy Policies: Merchants are solely responsible for posting their own privacy policies on their storefronts, obtaining necessary consents, and ensuring their data collection practices comply with applicable laws.
• No Direct Marketing to End-Customers: Builtrly does not directly interact with, market to, or use end-customer data for our own commercial purposes outside of providing the platform services to the merchant.

We use your information for the following purposes, each grounded in a lawful basis under applicable data protection law:

• Providing our services: To create and manage your account, process orders, generate stores, and run all platform features (Contractual necessity).
• Payment processing: To facilitate payouts to your bank account and manage subscription billing (Contractual necessity).
• Customer communications: To send transactional emails such as order confirmations, password resets, and platform notifications (Contractual necessity / Legitimate interest).
• Platform improvement: To analyze usage patterns, fix bugs, and improve features and performance (Legitimate interest).
• Marketing communications: To send promotional emails and product updates, where you have opted in or where permitted by applicable law. You may unsubscribe at any time.
• Security and fraud prevention: To detect, investigate, and prevent unauthorized access, fraud, and abuse of our platform (Legitimate interest / Legal obligation).
• Legal compliance: To comply with applicable laws, court orders, regulatory obligations, and to enforce our Terms of Service (Legal obligation).
• AI and product personalization: To personalize your experience and power AI-driven recommendations within the platform (Legitimate interest, with appropriate safeguards).

Automated Decision-Making & AI

While Builtrly utilizes Artificial Intelligence (AI) to assist merchants (for example, generating store layouts or product descriptions), we do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on individuals (such as credit scoring or service denial).

We do not sell your personal data. We may share your information with:

• Payment processors: To process payments and payouts. These providers maintain their own privacy policies and strict PCI-DSS compliance.
• Cloud infrastructure providers: Hosting, storage, and database services that run our platform. These providers operate under data processing agreements with us.
• Email delivery providers: To send transactional and marketing emails on our behalf.
• Analytics tools: Aggregated, anonymized data may be shared with analytics services to understand platform usage.
• Legal authorities: Where required by law, court order, or regulatory authority, we may disclose your data.
• Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to the acquiring entity. We will notify you prior to your data being transferred and subject to a different Privacy Policy.

We retain your personal data for as long as your account is active or as necessary to provide our services. Specifically:

• Account data is retained for the duration of your subscription and for up to 12 months after account deletion, to allow for reactivation and dispute resolution.
• Transaction and financial records are retained for a minimum of 7 years to comply with Nigerian financial regulations and tax obligations.
• Customer order data processed on your behalf is retained according to your data retention settings and is deleted upon your written request, subject to legal retention requirements.
• Support communications are retained for 3 years for quality assurance and dispute resolution purposes.
• Anonymized, aggregated analytics data may be retained indefinitely as it cannot be used to identify individuals.

You may request deletion of your account and personal data at any time by contacting us at privacy@builtrly.app. Deletion requests will be processed within 30 days, subject to legal retention obligations.

Builtrly uses cookies and similar tracking technologies to enhance your experience and analyze platform usage.

Types of cookies we use:

• Strictly necessary cookies: Required for authentication, session management, and core platform functionality. These cannot be disabled.
• Analytics cookies: Used to understand how merchants interact with the platform, so we can improve usability and performance.
• Preference cookies: Store your settings such as language preferences and display configurations.
• Marketing cookies: Used to measure the effectiveness of our advertising campaigns. These are only activated with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform.

"Do Not Track" Signals

Some web browsers offer a "Do Not Track" (DNT) signal that asks websites to suspend cross-site user tracking. Currently, there is no universally accepted standard for DNT signals. Therefore, our platform does not presently recognize or respond to DNT signals or similar global privacy control mechanisms.

Our platform integrates with third-party services to provide core functionality. By using Builtrly, you acknowledge that data may be shared with these services as described:

• Payment Gateways: Payment processing. Their respective privacy policies are available on their official websites.
• Google Analytics / similar tools: Aggregated platform analytics.
• Email service providers: Transactional email delivery.
• AI model providers: The Builtrly AI Agent may use third-party large language model APIs. Prompts are processed subject to our data handling agreements, and sensitive business data is minimized before transmission.

We encourage you to read the privacy policies of any third-party services you use in connection with your Builtrly store.

Third-Party Integrations Liability: If you choose to enable third-party apps, plugins, or logistics integrations (e.g., shipping couriers, marketing pixels) on your store, we will share data with those providers at your request. However, Builtrly is not responsible for how those third-party providers handle, store, or secure your data or your customers' data. Their use of the data is governed solely by their respective privacy policies.

We implement industry-standard technical and organizational security measures to protect your data from unauthorized access, alteration, disclosure, or destruction:

• All data in transit is encrypted using TLS 1.2 or higher.
• Data at rest is encrypted using AES-256 encryption.
• Access to production systems is restricted to authorized personnel with multi-factor authentication.
• We conduct regular security audits and penetration testing.
• Payment data is handled exclusively by PCI-DSS-certified processors. Builtrly does not store card numbers, CVVs, or full payment credentials on its servers.

Despite our best efforts, no method of data transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately at security@builtrly.app.

Data Breach Notification

In the event of a security breach that materially compromises the personal data of our merchants or their end-customers, Builtrly will notify affected merchants without undue delay (typically within 72 hours of becoming aware of the breach). This notification will provide you with the information necessary to meet your own regulatory obligations and notify your end-customers as required by law.

Builtrly is a business management platform intended for use by adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe your child has provided personal information to us, please contact us at privacy@builtrly.app and we will promptly delete such data.

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to restriction: Request that we limit how we process your data in certain circumstances.
• Right to portability: Receive your personal data in a structured, machine-readable format.
• Right to object: Object to processing of your data for direct marketing or where based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@builtrly.app. We will respond within 30 days. We may require identity verification before processing your request.

Builtrly is based in Nigeria and your data is primarily stored and processed within Nigeria. However, some of our infrastructure and third-party service providers may process data in other jurisdictions, including the United States and European Union. Where data is transferred internationally, we ensure appropriate safeguards are in place, including data processing agreements that incorporate standard contractual clauses or equivalent protections.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by email (to the address associated with your account) and by posting a prominent notice on our platform at least 14 days before the changes take effect.

Your continued use of Builtrly after the effective date of a revised policy constitutes your acceptance of the updated terms. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpb.gov.ng.