Privacy Policy

Last updated: 7 October 2026

Lagbot ("Lagbot", "we", "us") provides a WhatsApp-based AI assistant ("Nova") that helps businesses reply to customers, take orders, and manage their operations. This policy explains what information we collect when you use the Lagbot mobile app and connected services, how we use it, who we share it with, and the choices you have.

Who this applies to

This policy covers business users who sign up for and operate a Lagbot account, and the staff they invite. It also explains how we handle the messages that customers send to a business's connected WhatsApp number, so that Nova can respond to them on the business's behalf. If you are such a customer, the business you message decides how your messages are used. You can also contact us at the address below.

Information we collect

• Account information: your name, your email address, and your sign-in details (an emailed code, a PIN or password, or Google or Apple sign-in), managed by our authentication provider.
• Business profile: your business name, description, phone number, address and pickup point, opening hours, an optional business registration number, and the settings you give Nova.
• Payout details: if you set up payouts, your bank name, account number and account name.
• Catalogue and operations data: products, prices, photos, menus, stock, orders, sales, refunds and deliveries that you add or that the service records as you use it.
• Customer conversations: the WhatsApp messages, photos, voice notes and location pins that your customers exchange with your connected number, with their names and phone numbers. If you connect a number that already uses the WhatsApp Business app, we also import its recent chat history.
• Staff: the names and WhatsApp numbers of the staff you invite.
• Location: if you allow it, the app reads your phone's precise location while you set your pickup point. It does not track your location in the background.
• Contacts: if you allow it, the app reads the contacts on your phone so that you can pick a number to block. Only the numbers you choose leave your phone.
• Voice: when you hold to talk to Nova, the app records your voice to turn it into text. We do not store the recording or the transcript.
• Camera and photos: the photos you take or choose for products and menus.
• Files: the spreadsheets (CSV, XLSX) you import. We read them once and do not store them.
• Device and usage data: app version, device model, a push notification token, a device sign-in key, which screens you use, and log data such as request times, errors and IP address, which we need to run and secure the service.

How we use your information

• To operate the service: connecting your WhatsApp, running Nova, and showing your dashboard.
• To generate AI replies, read menu photos, and route conversations on your behalf.
• To process and track orders, stock, payments, refunds, payouts and delivery prices.
• To send you notifications, provide support, send service emails, and keep you informed about your account.
• To understand how the app is used and fix problems.
• To maintain security, prevent fraud and abuse, and meet legal obligations.

We do not show ads, and we do not use advertising identifiers.

AI processing

To generate responses, relevant message content and your business configuration are sent to our AI provider (Anthropic, the maker of Claude). Voice recordings go to a speech-to-text provider first. This processing happens only to serve your business. We do not sell your data, and we do not use your customers' message content to train third-party AI models.

Service providers we share data with

We share data only with the providers needed to run Lagbot, each acting on our instructions:

• Supabase: authentication, database and file storage.
• Anthropic (Claude): Nova's replies, reading menu photos, and answering your questions.
• WhatsApp / Meta: the messaging channel your customers use to reach you.
• Cloudflare: hosting for our servers, and server logs.
• Expo: app updates and push notification delivery. Google Firebase Cloud Messaging and Apple Push Notification service deliver the notifications to phones.
• Google: Google sign-in, and maps and address lookup in the Android app.
• Apple: Sign in with Apple on iPhone.
• Paystack: payment links, payout settlement accounts and refunds. Blusalt does the same for some businesses.
• Chowdeck: delivery price quotes. It receives the pickup and delivery addresses and locations.
• Speech providers (Deepgram, ElevenLabs, Cloudflare Workers AI, YarnGPT or Microsoft Azure): turning voice into text and text into speech, when voice features are on.
• Resend: account and service emails.
• OpenFreeMap: map images on the pickup point screen. It sees your IP address and the map area.

When you use Lagbot, some information also reaches your customers because you or Nova send it: for example your address, your opening hours, product photos, payment links, or your bank details when no payment link is set up. We may also disclose information if required by law, or to protect the rights, safety, and security of Lagbot, our users, or the public. We do not sell your personal information.

Data retention

We keep your information for as long as your account is active and as needed to provide the service. Customer photos and voice notes are deleted automatically after at most 180 days.

When you delete your account, we delete your account, business, catalogue, conversations, orders, payout details and settings at once. Database backups and server logs can hold a copy for up to 30 days. Paystack keeps payment records as financial law requires, and your WhatsApp Business account and messages stay with Meta and on your customers' phones.

Deleting your account

In the app, open Settings, then Privacy & Security, and tap Delete account. Without the app, follow the steps at app.lagbot.app/delete-account.

Security

We use industry-standard measures, including encryption in transit and access controls scoped per business, to protect your data. Changes to your payout bank account need your PIN or a biometric check. No system is perfectly secure, but we work to safeguard your information and to limit access to only what is necessary.

Your rights

You can request access to, correction of, or deletion of your personal data, and you can object to or restrict certain processing. To make a request, contact us at the address below and we'll respond within a reasonable timeframe.

Children

Lagbot is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18.

International transfers

Our providers may process data in regions outside your own. Where that happens, we rely on appropriate safeguards to protect your information consistent with this policy.

Changes to this policy

We may update this policy from time to time. When we make material changes, we'll update the date at the top of this page and, where appropriate, notify you in the app or by email.

Contact us

Questions about this policy or your data? Email us at support@lagbot.app.