How we handle your data.

When your business uses Revenue OS, your business is the controller of your customers' personal data — you decide why it is held and what it is used for. We are the processor: we handle it only to provide the service, and only on your instructions.

For your own account details — your name, your email, your business name — we are the controller, because we need those to give you the service.

Account information. Your name, email address, business name and channel connection details (such as a WhatsApp number or an Instagram account that you connect).

The data you put in. Customer records you import or that arrive through connected channels: names, phone numbers, email addresses, tags, purchase history, notes.

Messages. Conversations between your business and your customers, on the channels you connect. These include the words, and any voice notes, images or documents customers send.

Technical information. The minimum needed to run and secure the service: session information, and error and usage records that help us fix problems.

We do not store your card details. Anyone who bills you processes payment directly.

To give you the service: answer and follow up with your customers, keep your customer history in order, and show you what needs attention. To keep the service working and secure. To support you when you ask for help. And to send you service messages about your account.

We handle personal data in line with the Nigeria Data Protection Act 2023 and the data protection regulations that apply to it.

Revenue OS uses AI providers to understand incoming messages and to draft or send replies. When a message is processed by AI, its content is sent to the provider handling that step. We do not use your data to train models of our own, and we use providers through their business APIs, which do not train on the data submitted through them. We do not route customer messages through a free or research tier that lets a provider log or reuse them.

You decide how much the AI is allowed to do — from drafting something you approve yourself, to replying automatically within rules you set. Nothing is sent to a customer without either your approval or your explicit permission.

These providers handle data so we can run the service. Each one is bound to use it only for that purpose:

• SupabaseDatabase, authentication and file storage
• MetaWhatsApp, Instagram and Messenger message delivery
• 360DialogWhatsApp Business API access
• OpenAI, Anthropic and GoogleDrafting and understanding messages
• VercelApplication hosting

We do not sell personal data, and we do not share it for advertising. We will share it if the law requires it, or to protect the rights and safety of users and the public.

Data is encrypted in transit. Channel access tokens — the credentials that let us send on your behalf — are encrypted before they are stored, and are never exposed to a browser. Each business's records are isolated at the database level, so a query is scoped to one workspace and cannot reach another's data.

Access to production systems is limited to the people who need it to run and support the service. No system is perfect, and we will tell affected businesses if we ever become aware of a breach that affects their data.

For as long as your account is active, and for a short period afterwards in case you come back or need a record of a transaction. When you ask us to delete your data, we delete it, except for what we must keep to meet a legal or accounting obligation.

If your business stops using Revenue OS, you can export your customer records before your workspace is closed, and we will provide the rest of your data on request.

Under the Nigeria Data Protection Act 2023 you can ask to see the personal data we hold about you, have it corrected, have it deleted, receive a copy in a portable format, or object to how it is used. You can also ask us to restrict what we do with it.

Email hello@usebridger.com and we will respond within 30 days. If you are a customer of a business that uses Revenue OS, please contact that business first — they control your data, and we can only act on their instructions.

If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission.

Revenue OS is built for businesses. It is not intended for anyone under 18, and we do not knowingly collect data from children.

If our practices change, we update this page and change the date at the top. If a change materially affects how we use your data, we will tell account holders directly.

Questions about privacy, or a request about your data: write to hello@usebridger.com. If anything on this page is unclear, ask — we would rather explain it than have you guess.