1. Who We Are

Lameda is a chat commerce platform operated by Lameda Technologies Ltd in Nigeria. We help merchants sell their products through Telegram and WhatsApp without needing a website, app, or developer.

Our registered address and data controller contact: hello@lameda.com.ng

2. Data We Collect

We collect the following categories of personal data:

Account data: Email address, business name, phone number provided during registration.
Business data: Product catalogue, pricing, orders, and customer interactions conducted through our platform.
Customer data: Names, phone numbers, and delivery addresses provided by your customers when placing orders through your bot.
Usage data: Logs of how you and your customers interact with the platform for security and product improvement.
Payment data: Transaction references and amounts. We do not store card numbers — payments are processed by Paystack.

3. How We Use Your Data

To operate and improve the Lameda platform and your bot experience.
To process payments and send transaction confirmations.
To send you important service updates, security notices, and billing information.
To detect and prevent fraud, abuse, and security incidents.
To comply with applicable Nigerian law including the NDPR and CBN regulations.

4. Data Protection (NDPR)

We process your personal data in accordance with the Nigeria Data Protection Regulation (NDPR) 2019 and the NDPR Implementation Framework. As a merchant on Lameda, you are a data controller for your customers’ data. We act as your data processor. We do not sell personal data to third parties.

Sensitive fields (email addresses, bot tokens, delivery addresses) are encrypted at rest using AES-256-GCM before storage.

5. Data Sharing

We share your data only with the following sub-processors, strictly to deliver our service:

Supabase — Database and authentication (data stored in EU region)
Paystack — Payment processing (Nigerian entity, PCI-DSS compliant)
Anthropic — AI intent classification for bot conversations (no data retained per Anthropic’s API policy)
Telegram — Message delivery infrastructure for Telegram bots
Meta (WhatsApp Business Platform) — Message delivery infrastructure for WhatsApp bots. Messages are processed under Meta’s WhatsApp Business Terms of Service.
Vercel — Hosting and deployment infrastructure

6. Data Retention

We retain your account data for as long as you maintain an active account. Order and customer data is retained for 7 years to meet Nigerian tax and accounting obligations. You may request deletion of your account and associated personal data at any time by emailing us.

7. Your Rights

Under the NDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate personal data
Request deletion of your data (subject to legal retention obligations)
Object to processing of your data
Data portability — receive your data in a machine-readable format

To exercise any of these rights, email hello@lameda.com.ng. We will respond within 72 hours.

8. Cookies

We use only essential cookies required to maintain your login session. We do not use advertising or tracking cookies. No third-party analytics scripts are loaded on unauthenticated pages.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to you via email at least 14 days before they take effect. Continued use of Lameda after that date constitutes acceptance.

10. Contact

For any privacy concerns, data requests, or to lodge a complaint, contact our Data Protection Officer at hello@lameda.com.ng. You may also lodge a complaint with the National Information Technology Development Agency (NITDA).