Privacy Policy

1. About this policy

This policy explains how Cipher Knights Ltd, trading as Brandvoya ("we", "us"), handles personal data when you visit brandvoya.com, create an account, contact us, or use our services. We follow the UK GDPR and Data Protection Act 2018, the EU GDPR where it applies, and Nigeria's Data Protection Act 2023 (NDPA). Cipher Knights Ltd is registered with the UK Information Commissioner's Office as a data controller, registration number ZB930418.

• We are the controller for data about our users and visitors: your account, billing, support and usage data.
• We are a processor for data you bring to the Platform about other people, such as your contact lists, messages, store customers and leads. You decide how that data is used and are responsible for having a lawful basis for it. If you're one of our customers' contacts, please also read section 11.

2. What we collect

3. How we use it, and our legal basis

We don't make decisions about you using only automated means that have legal or similarly significant effects. Automatic safety checks (for example pausing a campaign with a very high complaint rate) can always be reviewed by a person: just contact us.

4. AI features

When you use the AI website builder or other AI features, the text you submit is sent to our AI provider (Anthropic) to generate the result. It isn't used to train their models. Don't include sensitive personal data in AI prompts.

5. Who we share it with

We never sell personal data. We share it only with providers who help us run the service, under contracts that require them to protect it and use it only for us, and when the law requires it.

We may also share data with professional advisers, with authorities when the law requires it, or with a buyer if our business is sold (they must keep this policy's protections).

6. International transfers

Some providers process data outside your country, including in the USA and the EU. Where UK, EU or Nigerian law requires it, we use recognised safeguards such as the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or adequacy decisions.

7. How long we keep it

8. How we protect it

Data is encrypted in transit (HTTPS/TLS) and at rest by our hosting providers. Passwords and API keys are stored only as secure hashes, and domain transfer codes are encrypted. Two-step sign-in is available for every account and required for our staff. Staff access is limited by role and logged. Uploaded business documents are kept in private storage and opened only through short-lived links. Even so, no system is perfectly secure: if a breach affects you, we'll tell you and the regulator as the law requires.

9. Your rights

You have the right to access, correct, download (portability) and delete your personal data, to object to or restrict how we use it, and to withdraw consent at any time. Many of these you can do yourself:

• Download your data: Settings › Privacy & data › Download.
• Correct it: Settings › Profile.
• Delete your account: Settings › Privacy & data, or see Data Deletion.
• Stop marketing emails: the unsubscribe link in any email, or Settings › Notifications.

For anything else, email support@socialboostlab.com. We reply within one month. You can also complain to a data protection authority: the Information Commissioner's Office in the UK (ico.org.uk), the Nigeria Data Protection Commission (ndpc.gov.ng), or your local authority. We'd appreciate the chance to help first.

10. WhatsApp Business

When you connect WhatsApp, you sign in through Meta's official signup and allow Brandvoya to manage your WhatsApp Business Account and send messages for you. We receive your WhatsApp Business Account ID, phone number, display name and message templates, and store the messages you send and receive, your customers' phone numbers and profile names, and delivery and read receipts, so we can show your inbox and reports. We use this only to provide the service to you; we don't sell it, use it for advertising, or share it with other customers. Messages pass through Telnyx (our WhatsApp Business Solution Provider) and Meta under their own terms.

11. If a business messaged you through us

Businesses use Brandvoya to send email, SMS and WhatsApp messages and run websites and stores. They decide whom to contact and are the controller of your data. To stop messages, use the unsubscribe link in the email, or reply STOP to the SMS or WhatsApp message: we add you to that business's do-not-contact list automatically. To ask about your data, contact the business; if you can't, email us and we'll pass on your request and help.

12. Children

The Platform is for adults and businesses. We don't knowingly collect data from anyone under 18. If you believe a child has given us their data, contact us and we'll delete it.

13. Cookies

We use essential cookies to keep you signed in and secure, and set chat cookies only if you open live chat. See the Cookie Policy.

14. Changes

We'll update this policy when our services or the law change, and tell you about important changes by email or in the Platform before they take effect.