Privacy Policy

1. Who We Are

Creavex ERP is a multi-tenant SaaS (Software as a Service) business management system built and operated by Creavex Technology, registered in Nigeria.

Contact: hello@creavexerp.com  |  +234 706 773 7037

Website: creavexerp.com  |  creavextech.com

2. Information We Collect

2.1 Account & Company Information

• Company name, email address, phone number, business address
• Admin user name, email address, and phone number
• Staff user names, email addresses, and phone numbers
• Business registration details (RC number, VAT/TIN number) if provided

2.2 Business Data You Enter

• Products, stock levels, warehouse information
• Sales records, invoices, receipts
• Customer names, phone numbers, and email addresses
• Supplier names and contact details
• Financial data including expenses, income, and VAT records
• Goods received notes (GRN), dispatch records, purchase orders
• Staff activity logs and audit trails

2.3 Technical Data

• IP address and browser type when accessing the platform
• Login timestamps and session information
• Device type (mobile or desktop)

2.4 Communication Data

• WhatsApp message logs sent through our platform (template messages only)
• Emails sent through our system (invoices, receipts, password resets)
• Support messages sent to us via email or WhatsApp

3. How We Use Your Information

We use your information only to provide and improve the Creavex ERP service:

• To create and manage your company account on the platform
• To store and process your business data (stock, sales, customers, etc.)
• To send WhatsApp alerts and notifications configured by your business
• To send invoices and subscription-related emails to your registered email
• To generate business reports and analytics within your account
• To provide customer support when you contact us
• To maintain security, prevent fraud, and audit system activity
• To comply with Nigerian legal and regulatory requirements (e.g. FIRS VAT reporting)

We do not sell your data to third parties. We do not use your business data for advertising purposes.

4. Data Isolation & Multi-Tenancy

Creavex ERP is a multi-tenant platform. Each company's data is completely isolated from other companies on the platform. Your stock, sales, customers, and financial data are only accessible to:

• Your company's authorised staff users (based on their assigned roles)
• Creavex Technology system administrators (for maintenance and support purposes only)

No other company on the platform can access your data.

5. WhatsApp & Third-Party Services

Creavex ERP uses the following third-party services to deliver its features:

5.1 Meta WhatsApp Business API

We use Meta's WhatsApp Business API to send automated alerts (sales notifications, GRN approvals, low stock alerts, credit reminders, and reconciliation reports) to your registered admin and manager phone numbers. By using our WhatsApp alert features, you agree to Meta's WhatsApp Business Terms of Service. Customer phone numbers entered into our system may be used to send receipts and broadcast messages only when explicitly triggered by your authorised staff.

5.2 Email (SMTP)

We use secure SMTP servers to send system emails including invoices, password reset links, and receipt emails.

5.3 Hosting & Infrastructure

Your data is stored on secure servers. We maintain regular backups to prevent data loss.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription or your account is permanently deactivated:

• Your data remains on our servers for a period of 90 days after account closure
• After 90 days, your company data is permanently deleted from our systems
• You may request earlier deletion by contacting us at hello@creavexerp.com

Audit logs and transaction records may be retained longer where required by Nigerian law.

7. Your Rights

As a Creavex ERP user, you have the right to:

• Access — request a copy of the data we hold about your company
• Correction — update or correct inaccurate information in your account
• Deletion — request permanent deletion of your company's data
• Portability — request an export of your business data in a common format (CSV)
• Restriction — request that we limit how we process your data

To exercise any of these rights, contact us at hello@creavexerp.com or via WhatsApp at +234 706 773 7037.

8. Security

We take the security of your business data seriously. Our security measures include:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Passwords are hashed and never stored in plain text
• Access to your data is restricted by role-based permissions within your company
• All user actions are logged in an audit trail
• Regular server backups to prevent data loss
• Super admin accounts are restricted to Creavex Technology staff only

While we implement industry-standard security practices, no system is 100% immune to breaches. In the event of a security incident affecting your data, we will notify you promptly.

9. Cookies

Creavex ERP uses minimal browser storage (localStorage) to maintain your login session. We do not use advertising cookies or tracking pixels. We do not share browsing data with third-party analytics providers.

10. Children's Privacy

Creavex ERP is a business platform intended for use by adults operating registered businesses. We do not knowingly collect data from individuals under the age of 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time as our platform evolves. We will notify registered companies of significant changes via email. The "Last updated" date at the top of this page will always reflect the most recent revision. Continued use of Creavex ERP after changes constitutes acceptance of the updated policy.

12. Governing Law

This Privacy Policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act (NDPA) 2023 and any applicable regulations issued by the Nigeria Data Protection Commission (NDPC).