Privacy Policy — Ubuntu AI Studio

1. Who we are

Ubuntu AI Studio (“we”, “us”, “our”) provides AI-powered conversation automation, lead capture, and sales services through the website at ubuntu.lagosnomad.com (the “Site”) and the services we deliver on connected channels such as WhatsApp, Instagram, X, email, and web contact forms (the “Service”).

This policy explains what data we collect, why we collect it, how it is used and shared, and the rights you have over it. It applies to visitors of the Site and to customers and end-users who interact with a business’s AI through the Service.

2. Data we collect

We collect only the data needed to run the Site and deliver the Service:

Account and contact details — name, email address, business name, and billing information you give us when you sign up or book a demo.
Connected channel data — the channels you connect (WhatsApp, Instagram, X, email, contact forms) and, where you authorise it, access to those accounts so the AI can send and receive messages.
Conversation content — messages, orders, questions, and inquiries that the AI processes on your behalf, including customer messages sent to your channels.
Training material — company information, tone guidelines, policies, pricing, and FAQs you provide so we can train and tune your AI.
Usage and technical data — pages visited, device and browser information, timestamps, and aggregated analytics used to operate and improve the Site and Service.
Cookies and similar technologies — as described in section 8.

3. How we use your data

To provide, operate, and maintain the Service, including generating AI replies, capturing leads, and routing conversations to your team.
To train and tune your AI so it responds in your voice and according to your policies.
To process payments, issue invoices, and manage your account.
To send service messages, updates, and, where you have consented, marketing communications.
To monitor, analyse, and improve performance, security, and reliability.
To comply with legal obligations and enforce our agreements.

4. How we share data

We do not sell your data. We share it only in the following ways:

Service providers — hosting, payment processing, cloud infrastructure, and AI model providers who process data on our behalf under confidentiality obligations.
Your team — where you connect channels, the people you authorise can see and respond to conversations through the Service.
Legal requirements — where we are required to disclose data by law, regulation, or valid legal process.

When we share data with AI model providers to generate replies, we transmit only the message context needed for that request and instruct providers not to use it to train their own models.

5. AI and automated processing

The Service uses AI to read, respond to, and qualify conversations automatically. AI-generated responses can be imperfect. Where accuracy is critical (for example orders, payments, or bookings), humans may review conversations, and you are responsible for supervising automated responses delivered on your channels. We keep a record of conversations processed through the Service so that mistakes can be identified and corrected.

6. Data retention

We retain data only for as long as needed to provide the Service, satisfy your requests, and comply with legal or accounting requirements. When you close your account, we delete or anonymise your data unless we are required to keep it by law.

7. Your rights

Depending on where you are located (including under the GDPR, the UK GDPR, Nigeria’s NDPA/NDPR, and Kenya’s Data Protection Act), you may have the right to:

Access a copy of the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data.
Object to or restrict certain processing.
Receive your data in a portable format.
Withdraw consent at any time where processing relies on consent.
Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details in section 13. We will respond within the timeframes required by applicable law.

8. Cookies

We use cookies and similar technologies to keep the Site working, remember preferences, and understand how the Site is used. You can control cookies through your browser settings; disabling them may affect how the Site works.

9. Security

We use encryption in transit, restricted access controls, and reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Third-party links

The Site and Service may link to third-party services, including Instagram, WhatsApp, and others. Those services have their own privacy policies, and we are not responsible for their practices.

11. Children

The Service is not directed at children under 16. If you believe a child has provided us personal data, contact us and we will delete it.

12. International transfers

Your data may be stored or processed outside your country, including by cloud and AI providers. Where transfers occur, we rely on appropriate safeguards required by applicable law.

13. Contact us

Questions about this policy or requests to exercise your rights can be sent to hello@ubuntu.lagosnomad.com or through the contact form on our site.

14. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date at the top of this page. Continued use of the Site or Service after changes take effect means you accept the updated policy.