This is a product-facing transparency notice, not legal advice. The final legal basis, controller/processor allocation, retention schedule, and representative details should be reviewed and confirmed by qualified Nigerian privacy counsel.
Who we are
Padorix provides a multi-tenancy customer support platform that helps businesses manage conversations, teams, widgets, visitor insights, an AI support assistant, and notifications. For account, billing and platform administration data, Padorix acts as a data controller. For customer information submitted by a business through the service, Padorix generally acts as a processor or service provider on that business's instructions.
The business that invites you, embeds the Padorix widget, or otherwise uses the service is responsible for explaining its own processing and responding to requests about data it controls.
Data we may process
- Account and identity data such as names, business email addresses, phone numbers, role, workspace membership, and verification records.
- Support content such as messages, images, voice notes, attachments, support tickets, tags, replies (including AI assistant replies where a business has switched the assistant on), and conversation metadata.
- Technical and usage data such as IP address, device and browser information, page URL, referrer, approximate location, timestamps, and security events.
- Plan and billing data: each workspace's plan, subscription status, billing periods, payment and invoice records, and usage counted against plan limits. Card and other payment details are collected by our payment partner, Bachs, on its hosted checkout and are not stored by Padorix.
- Notification and team administration data where these features are used.
Purposes and lawful grounds
We use personal data to provide and secure the service, create and administer accounts, deliver support features, process payments and keep billing records, apply plan limits, send transactional communications, maintain reliability, prevent abuse, and comply with legal obligations. Depending on the context, processing may be based on performance of a contract, compliance with a legal obligation (for example tax and accounting records), legitimate interests that do not override individual rights, or consent where consent is required.
Where a business uses Padorix to communicate with its own customers, including through the AI assistant, that business determines the appropriate purpose and lawful ground for the relevant customer data and remains responsible for its notices and instructions.
Automated replies
Where a business switches on the AI assistant, replies to its visitors may be generated automatically from that business's knowledge base. The assistant does not make decisions that produce legal or similarly significant effects on visitors. Visitors can ask for a person at any time, and the conversation is then handed to the business's team.
Your rights
Subject to applicable limitations and verification requirements, you may have rights to be informed, access your data, request correction, request deletion, restrict or object to processing, request portability, withdraw consent, and complain to the NDPC or another competent supervisory authority.
To exercise a right, contact us using the details in this notice and identify the account or business relationship involved. We may need additional information to verify identity and protect another person's privacy.
International transfers and service providers
Padorix uses infrastructure and service providers located in Nigeria or other countries, including hosting, file storage, email, push notifications, our AI provider (Google Gemini) and our payment partner (Bachs). Before transferring personal data, we assess the applicable legal requirements and use appropriate contractual, technical, and organizational safeguards. Service providers receive only the access needed to perform their function and are expected to protect information confidentially.
Security and incident response
We use access controls, authentication, logging, backups, encryption in transit, and operational safeguards appropriate to the risk. Payment details are handled on our payment partner's hosted checkout rather than on Padorix systems. No online service is completely risk-free. If we identify a personal data breach, we assess its impact, contain it, preserve evidence, and make notifications required by applicable law.
Retention
We retain personal data only for as long as needed for the relevant purpose, to provide the service, resolve disputes, enforce agreements, maintain security records, or meet legal and accounting requirements. Billing records are kept for the period required by tax and accounting law, including after a workspace is deleted. Other retention periods vary by data type and business instructions. When data is no longer required, we delete, anonymize, or securely isolate it.
Children and sensitive data
Padorix is intended for businesses and is not directed to children. Do not submit children's data or sensitive personal data through the service unless you have a lawful basis, required notices and safeguards, and a documented instruction for the processing. Contact us promptly if you believe such information was submitted in error.
Contact and complaints
For privacy questions or requests, contact the Padorix privacy team at support@padorix.com. You may also contact the Nigeria Data Protection Commission where you believe your rights have not been respected. We will acknowledge and handle requests within the time required by applicable law.
Updates
We may update this notice when our processing, services, or legal obligations change. The revised date at the top of this page shows when the latest version took effect. Material changes will be communicated through the service or another suitable channel.