AkuCRM Privacy Policy

AkuCRM is a business customer relationship management, communications, marketing, social media, and advertising platform. AkuCRM is a product of JOKAPA GEE LTD, a private company limited by shares incorporated in Nigeria with RC Number 9584978. In this Policy, “AkuCRM,” “we,” “us,” and “our” refer to JOKAPA GEE LTD.

Our registered office is F1 Plot 6, Destiny Layout, Thinkers Corner, Abakpa, Enugu, Enugu State, Nigeria. This Policy applies to the AkuCRM website, dashboard, mobile-accessible experiences, application programming interfaces, reviewer and test surfaces, and the services and integrations made available through them (collectively, the “Service”).

AkuCRM acts as a data controller for information used to operate our own business, including account registration, organization administration, billing, security, support, product communications, and legal compliance.

AkuCRM ordinarily acts as a data processor on behalf of a business customer when the customer imports or collects CRM contacts, manages leads, sends communications, operates landing pages, connects social accounts, or otherwise instructs AkuCRM to process information about the customer’s contacts, prospects, employees, agents, or end users. The customer remains responsible for determining the lawful basis and purpose of that processing, providing required notices, obtaining required consent, and responding to requests from those individuals.

Account and organization information

• Name, email address, telephone number, organization name, job role, profile details, invitations, membership, and access permissions.
• Authentication, session, login, security, device, browser, IP address, and audit information.
• Subscription plan, transaction reference, amount, currency, payment status, and billing correspondence. AkuCRM does not ordinarily store complete payment-card details.

CRM, sales, and field-work information

• Contact names, email addresses, telephone numbers, companies, addresses, notes, tags, custom fields, consent status, lead scores, activities, calls, tasks, deal values, and pipeline information.
• Agent assignments, work status, check-in details, and precise geographic coordinates when an authorized user enables location-based functionality.

Communications and marketing information

• Email and SMS sender and recipient details, message content, attachments, templates, delivery status, bounces, complaints, opens, clicks, and unsubscribe records.
• WhatsApp Business account and telephone details, templates, inbound and outbound messages, attachments, delivery events, and conversation information.
• Campaigns, audience or segment criteria, automation events, marketing-consent records, and suppression-list information.

Social media and advertising information

• Connected account identifiers, usernames, account type, Page identifiers, profile information, granted permissions, encrypted OAuth tokens, token expiry, and connection status.
• Posts, drafts, captions, media, publishing schedules, comments, replies, direct messages, conversations, message or comment authors, attachments, and webhook events.
• Follower or fan counts, reach, impressions, engagement, media insights, campaign performance, advertising accounts, audiences, creatives, budgets, leads, and spend information.

Landing pages, files, domains, and AI information

• Landing-page content and submissions, visitor events, referrer or campaign information, and privacy-preserving identifiers derived from IP addresses for security, rate limiting, and measurement.
• Uploaded media, brand assets, custom-domain and DNS details, sender-domain configuration, and email-routing information.
• Prompts, selected business context, instructions, and generated results when a user requests AI-assisted content.

We receive information:

• directly from account holders and authorized organization members;
• from files, forms, landing pages, imports, messages, and other content submitted through the Service;
• from customer contacts, message senders, and people interacting with connected Pages or professional accounts;
• from platforms and services that a customer chooses to connect, including Meta, Google, TikTok, LinkedIn, and X; and
• from payment, communications, hosting, security, and analytics providers used to operate the Service.

When AkuCRM processes customer-controlled data as a processor, the customer determines the lawful basis and AkuCRM processes the data under the customer’s documented instructions, our agreement, and applicable law.

AkuCRM uses official OAuth and API integrations. A user chooses which account to connect and which permissions to grant. We do not receive or store the user’s social-platform password.

• Facebook Pages and Messenger: depending on the permissions granted, AkuCRM may identify Pages, display Page metadata and engagement, publish and manage Page posts, read user-generated Page content, create or manage Page replies and engagement, subscribe the Page to webhook events, and receive or respond to customer-initiated Messenger conversations.
• Instagram professional accounts: AkuCRM may identify the connected Business or Creator account, publish authorized organic media, display and manage public comments, receive and respond to customer-initiated direct messages, and retrieve permitted profile, media, and performance information.
• WhatsApp Business: AkuCRM may connect an authorized business account, manage approved templates, and process customer communications and delivery information in accordance with Meta’s rules.
• TikTok, X, LinkedIn, and YouTube: AkuCRM processes the profile, publishing, media, and analytics information allowed by the scopes selected during authorization and needed for the requested feature.

We use connected-platform information only to provide the customer-authorized integration, support the customer’s workspace, protect the Service, and comply with applicable requirements. We do not sell connected-platform data. Each platform separately processes information under its own terms and privacy policy.

When a connection is removed, AkuCRM stops using it and marks the account inactive or revoked. We revoke platform access where the platform supports revocation. Credential and integration records are deleted or anonymized when no longer reasonably required for security, audit, recovery, dispute resolution, or legal compliance.

When a user requests AI-assisted copy, captions, advertising content, or page content, AkuCRM sends the user’s prompt and relevant selected context to Google Gemini for processing. AkuCRM currently uses a paid Gemini API service under which Google states that prompts and generated responses are not used to improve Google’s products or train its models. Google may temporarily process or log information for abuse prevention, security, and legal compliance.

AkuCRM does not use AI output to make decisions that produce legal or similarly significant effects about individuals. AI output may be inaccurate, incomplete, or unsuitable. Users must review and approve output before using or publishing it and should not submit unnecessary sensitive, confidential, or unlawfully obtained information in a prompt.

We use essential cookies and comparable technologies for authentication, signed organization context, security, OAuth state and PKCE protection, preferences, reviewer access, and core Service functionality. These technologies are necessary to provide the Service.

AkuCRM and our customers may also use email-open pixels, tracked links, landing-page events, and similar technologies to measure delivery and engagement. Where applicable law requires consent for a non-essential technology, we or the relevant customer must obtain that consent and provide an appropriate choice before activating it.

We do not sell personal data. We disclose information only as reasonably necessary:

• Infrastructure and security: Cloudflare for hosting, networking, security, and Turnstile; Supabase for database, authentication, storage, realtime, and backend services.
• Communications: Resend and other configured email infrastructure; Termii, Africa’s Talking, telecommunications providers, and mobile network operators for SMS and related delivery.
• Payments: Paystack and participating banks or payment networks for transactions, fraud checks, refunds, and disputes.
• AI: Google Gemini when a user intentionally requests an AI feature.
• User-authorized platforms: Meta services, Google and YouTube, TikTok, LinkedIn, X, and other services the customer chooses to connect.
• Professional and legal recipients: auditors, insurers, legal and professional advisers, regulators, courts, law enforcement, or another party where required by law or necessary to protect legal rights.
• Business transactions: a prospective buyer, investor, lender, or successor subject to appropriate confidentiality and data-protection safeguards.

Service providers receive only the information reasonably necessary for their function and are required by contract or applicable law to protect it. A customer may also direct AkuCRM to disclose information to an integration or recipient selected by that customer.

AkuCRM is operated from Nigeria, but some service providers and connected platforms process information in other countries. Where personal data is transferred internationally, we use applicable contractual, organizational, and technical safeguards and assess whether consent, an adequacy basis, or another lawful transfer mechanism is required.

We keep personal data only for as long as reasonably necessary for the purposes described in this Policy. Our standard retention periods are:

A longer period may apply where necessary to comply with law, preserve evidence, resolve a dispute, protect users, or exercise legal rights. Connected platforms may independently retain information under their own policies.

We use reasonable technical and organizational safeguards appropriate to the nature of the information, including encrypted network connections, encrypted storage of integration tokens, backend-only credential access, authentication, role-based permissions, organization-level data isolation, access logging, rate limiting, and restricted administrative access. No service can guarantee absolute security, and users must protect their credentials and promptly report suspected compromise.

Subject to applicable law and appropriate identity verification, an individual may request information about our processing and exercise rights of access, correction, deletion, restriction, objection, portability, withdrawal of consent, and human review of a qualifying solely automated decision. A customer contact should ordinarily submit their request first to the AkuCRM customer that controls their information; we will assist that customer where required.

Submit a request to privacy@akucrm.com. We aim to respond within 30 days. If additional time is permitted and reasonably required because a request is complex, we will explain the reason and expected timing. You may also complain to the Nigeria Data Protection Commission through its official channels.

An authenticated AkuCRM user can also submit and track a deletion request through our Data Deletion page.

AkuCRM is a business service intended for persons aged 18 or older and is not directed to children. Customers must not use the Service to collect or process children’s personal data unless they have a valid legal basis, provide all required notices, obtain any required parental or guardian authorization, and comply with applicable safeguards.

We may update this Policy to reflect changes in the Service, law, or our processing practices. We will post the revised version with a new effective date and provide reasonable advance notice by email or within the Service when a change is material. Where a new use of information requires consent, we will request that consent rather than relying only on continued use.

JOKAPA GEE LTD
RC Number 9584978
F1 Plot 6, Destiny Layout, Thinkers Corner, Abakpa, Enugu, Enugu State, Nigeria

• Privacy and data-rights requests: privacy@akucrm.com
• Legal notices: legal@akucrm.com
• Customer support: support@akucrm.com
• Telephone: +234 903 971 8712

These contact details also appear in our Terms of Service.