Regulatory & Data Compliance

Privacy Policy

Last Updated: October 2026 • Effective Date: June 15, 2025

1. Scope & Overview

This Privacy Policy explains how Laskad Technologies Inc. ("Laskad", "we", "us", or "our") collects, uses, protects, and discloses personal information when you access our platform, web portals, and WhatsApp group automated financial management services. By using Laskad, you consent to the data practices described in this policy.

2. What Information We Collect

To provide automated group escrow, dues collections, and WhatsApp financial receipts, we collect the following categories of information:

  • Identity & Contact Data: Full legal name, phone number, and email address for account administrators and group organizers.
  • Banking & KYC Verification: Bank Verification Number (BVN) and bank account numbers provided for identity verification. Important: Your BVN is verified in real-time through CBN-licensed banking partner APIs and is never permanently retained on Laskad databases after verification.
  • Transaction & Ledger Data: Deposit records, payment timestamps, virtual account numbers, withdrawal requests, voting approvals, and instant PDF receipt records.
  • WhatsApp Group Context: WhatsApp group invite link, group ID, and designated bot webhook events. Laskad only parses financial messages directed to our bot or matching contribution workflows; we never access or read personal, non-financial group chat messages.
  • Technical Device Data: IP address, browser type, and diagnostic telemetry used exclusively to maintain security, prevent fraud, and audit system health.

3. Legal Basis for Processing

In accordance with the Nigeria Data Protection Act (NDPA / NDPR) and applicable data protection regulations, we process your information based on:

Contractual Necessity
To execute group financial tracking, Ajo/Esusu payouts, and automated receipts requested by your group.
Regulatory Mandates
Compliance with Central Bank of Nigeria (CBN), NDIC, and Anti-Money Laundering (AML/CFT) laws.
Explicit Consent
Your affirmative consent provided during onboarding and group connection.
Legitimate Security Interest
Detecting multi-admin voting anomalies, unauthorized access, and financial fraud.

4. Regulated Infrastructure & Third-Party Partners

We never sell or rent your personal data. We share transactional information solely with licensed, regulated infrastructure providers necessary to operate the service:

  • SafeHaven Microfinance Bank: Central Bank of Nigeria (CBN) licensed and NDIC insured microfinance bank providing core banking infrastructure, dedicated virtual accounts, and escrow custody.
  • Meta WhatsApp Cloud API: Official Meta Business Cloud platform delivering end-to-end encrypted messaging and verified bot notifications.
  • Lint Technologies: ISO-27001 certified identity verification, biometric auditing, and fraud screening rails governed by strict Data Processing Agreements.
  • OpenAI: Anonymized natural language intent parsing enabling member balance queries in plain language (zero training on identifiable member records).
  • Law Enforcement & Regulators: Only when strictly mandated by valid legal court orders, statutory obligations, or authorized CBN inquiries.

5. Data Security Standards

Laskad employs multi-layered technical, physical, and organizational security controls:

  • AES-256 bit cryptographic encryption for all stored data and TLS 1.3 encryption for data in transit.
  • Multi-admin cryptographic approval thresholds (75%+ consensus) for group wallet fund releases.
  • Role-based access controls (RBAC) ensuring only authorized engineers access production infrastructure.
  • Annual independent third-party penetration testing and automated vulnerability scanning.

6. Data Retention Policy

  • BVN & Verification Tokens: Securely purged immediately following partner verification.
  • Financial Transaction Records: Retained for 7 years in accordance with Nigerian statutory financial recordkeeping obligations.
  • Inactive Groups: Group metadata is securely archived and deleted after 2 years of inactivity unless required for ongoing audits.

7. Your Rights under NDPR

You retain full rights under the Nigeria Data Protection Regulation, including the right to request access to your records, rectify inaccurate data, withdraw consent, and request account deletion (subject to legal retention periods).

To exercise your data privacy rights, email our Data Protection Officer at privacy@laskad.com.

8. Contact & Updates

We may update this Privacy Policy periodically to reflect technological or regulatory developments. When updates are published, we will update the "Last Updated" date above and notify administrators through the Laskad dashboard or WhatsApp.

Questions regarding this policy may be directed to legal@laskad.com or via WhatsApp support at +234 906 557 7709.

Laskad

Need help onboarding?

Ask Laskad Bot about group setup, commands & biometrics!