Privacy Policy

1. Data Controller

The data controller is Business Affairs Platform Limited, Lagos, Nigeria. You can contact us at privacy@businessaffairs.ng.

2. What we collect

Invoice content (you enter): business name, client name, addresses, emails, items, amounts, notes and any logo you upload. This data stays in your browser; we do not transmit or store it on our servers.

Technical data: IP address, browser type, device, referrer, pages viewed and a daily invoice-generation counter stored in your browser’s localStorage to enforce free-tier limits.

Advertising data: Google AdSense may set cookies and read device identifiers to serve personalised or non-personalised ads.

3. Legal bases (GDPR Art. 6 / NDPR 2.2)

• Legitimate interest — running and securing the service, basic analytics, fraud and abuse prevention.
• Consent — advertising and analytics cookies that are not strictly necessary (you can withdraw consent at any time).
• Contract — when you choose to contact Business Affairs for paid services.

4. How we use your data

• To generate and download your invoice locally on your device.
• To measure aggregate, anonymised usage of the tool.
• To display advertising that keeps the tool free.
• To respond to enquiries you send us.

5. Cookies and similar technologies

We use a small number of strictly necessary cookies (theme, usage counter). Google AdSense and analytics providers may set additional cookies. You can manage cookies through your browser settings or via Google’s Ads Settings.

6. Sharing and international transfers

We do not sell your personal data. Limited data may be processed by our hosting provider and by Google (AdSense / Analytics) which may involve transfers outside Nigeria or the EEA. Such transfers rely on NDPR-approved safeguards and the EU Standard Contractual Clauses.

7. Retention

Invoice content is never retained by us — it is discarded when you close the tab. Server logs are kept for up to 30 days for security. Cookies expire according to the schedule set by each provider.

8. Your rights

Under the NDPR/NDPA and GDPR you have the right to access, rectification, erasure, restriction, objection, data portability and to withdraw consent. EU/UK users may lodge a complaint with their supervisory authority; Nigerian users with the Nigeria Data Protection Commission (NDPC). To exercise any right, email privacy@businessaffairs.ng. We respond within 30 days.

9. Children

Invoicelogic is not directed to children under 16 and we do not knowingly collect their data.

10. Changes

We may update this policy. Material changes will be posted on this page with a new effective date.