Privacy Policy
Last updated 14 October 2026
IGNITECORE is an AI sales assistant that answers WhatsApp enquiries for property businesses in Nigeria. It is operated by IGNITECORE TRADING SERVICES, 13 Alafia Estate, Emiloju Street, Ibadan, Oyo State 200221, Nigeria ("we", "us"). This policy explains what personal data we handle, why, who we share it with and the rights you have under the Nigeria Data Protection Act 2023 (NDPA).
1. Who this policy covers
- Business customers: the property companies that sign up for IGNITECORE, and the staff they invite.
- People who message a business on WhatsApp where that business uses IGNITECORE to reply.
- Visitors to our website.
2. Our role
For business customer accounts, billing and our website, we decide how personal data is used and are the data controller.
When you message a property business on WhatsApp, that business is the data controller of your conversation. We process it on the business's behalf and on its instructions, as its data processor. If you have a question about how a business uses your details, contact that business first. We will help it answer you, and you can always contact us directly (section 10).
3. What we collect
From business customers
- Account details: name, email address, phone number, and a password held by our authentication provider.
- Business details: company name, the WhatsApp Business number connected to IGNITECORE, and settings.
- Documents and information you upload, such as price lists, property details and payment plans, which the assistant uses to answer enquiries.
- Billing records: your plan, subscription status and payment references. Card details are entered on Korapay's checkout page and are never received or stored by us.
From people who message a business
- Your WhatsApp phone number and WhatsApp profile name.
- The messages you send and receive in that conversation, and their delivery status.
- Details you share in the conversation that help the business serve you, such as the location, budget, property type and timeline you are interested in, and a lead score that tells the business how ready you appear to buy.
Technical data
- Server logs such as IP address, browser type, timestamps and request identifiers, used for security and to fix faults. We do not write the content of your conversations to logs in production.
- Your browser stores the information that keeps you signed in, your selected business and your light or dark theme. We do not use advertising or analytics cookies.
4. Why we use it, and our lawful basis
| Purpose | Lawful basis (NDPA s.25) |
|---|---|
| Providing IGNITECORE: answering enquiries, qualifying leads, follow-ups and handing over to staff | Performance of our contract with the business customer; for people messaging a business, the business's own lawful basis, on whose behalf we act |
| Managing accounts, subscriptions and payments | Performance of a contract |
| Keeping the service secure, preventing abuse and fixing faults | Legitimate interests |
| Keeping financial and tax records | Legal obligation |
| Service messages to business customers about their account | Performance of a contract |
We do not sell personal data, and we do not use it for advertising.
5. How the AI assistant uses your data
To reply to a WhatsApp message, IGNITECORE sends the conversation and relevant extracts of the business's own documents to OpenAI, which generates the reply and picks out details such as budget and location. Each business's data is kept separate: the assistant only ever draws on the documents of the business you are talking to. The assistant does not make decisions with legal or similarly significant effects on you: it answers questions, and the business's staff decide what happens next. You can ask to speak to a person at any time, and staff can take over a conversation whenever they choose.
Under OpenAI's API terms as at the date of this policy, data sent through its API is not used to train its models.
6. Who we share it with
We share personal data only with the providers that run the service for us, under contract:
- Meta Platforms (WhatsApp Business Platform): to receive and send WhatsApp messages.
- OpenAI: to generate replies and extract lead details (section 5).
- Supabase: database, sign-in and document storage, hosted in the European Union.
- Railway and Vercel: hosting for our application servers and website.
- Korapay (Korapay Technologies): payment processing for plan payments.
We may also disclose data where the law requires it, or to protect the rights and safety of our users or the public.
7. International transfers
Some of these providers store or process data outside Nigeria, including in the European Union and the United States. Where we transfer personal data out of Nigeria we rely on the grounds in Part VIII of the NDPA, including the provider's contractual commitments to protect it.
8. How long we keep it
- Account, business and conversation data: for as long as the business customer's account is active. After an account is closed, we delete or anonymise it within 90 days, unless the business asks us to delete it sooner or the law requires us to keep it.
- Uploaded documents: until the business deletes them or closes its account.
- Billing and tax records: for six years, as Nigerian tax law requires.
- Server logs: for a limited period needed for security and troubleshooting.
9. How we protect it
Data is encrypted in transit (HTTPS) and stored with providers that encrypt it at rest. Every request is checked on our servers to make sure a person can only see their own business's data, and uploaded documents are kept in private storage. Access by our staff is limited to what is needed to run and support the service. If a personal data breach is likely to put your rights at risk, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and tell you where the NDPA requires us to.
10. Your rights
Under the NDPA you can ask us to:
- give you a copy of the personal data we hold about you;
- correct data that is wrong or incomplete;
- delete your data, or restrict how we use it;
- stop using it where we rely on legitimate interests;
- give you your data in a portable format; and
- withdraw consent, where we rely on consent.
Email admin@support.ignitecoreai.com. We may need to confirm your identity, for example by asking you to message us from the WhatsApp number concerned. We aim to reply within 30 days. If you messaged a property business, we will pass your request to that business and help it respond.
If you are not satisfied with our answer you can complain to the Nigeria Data Protection Commission.
11. Children
IGNITECORE is a service for businesses and is not directed at anyone under 18. We do not knowingly collect children's data; if you believe we have, contact us and we will delete it.
12. Changes to this policy
We will post any change on this page and update the date above. If a change materially affects how we use business customers' data, we will tell them by email before it takes effect.
13. Contact
IGNITECORE TRADING SERVICES
13 Alafia Estate, Emiloju Street, Ibadan, Oyo State 200221, Nigeria
admin@support.ignitecoreai.com
See also our Terms of Service and Data Protection notice.