Privacy Policy

1. Who We Are

Manager.io Nigeria E-invoice Connector is an independent software integration solution developed and supported by Adib Tech Team.

In this Privacy Policy, “Connector”, “Service”, “we”, “us” and “our” refer to the operator of Manager.io Nigeria E-invoice Connector.

For privacy enquiries, requests or complaints, our contact details are provided at the end of this Policy.

2. Scope of This Policy

This Policy applies to personal data processed through:

• our public website;
• business registration and onboarding;
• trial and subscription administration;
• TEST and PRODUCTION e-invoicing processing;
• payment verification;
• technical logs and security systems; and
• customer support communications.

3. Our Role as Data Controller and Data Processor

Our role depends on the type of information being processed.

Information We Control Directly

Where we process information for our own business purposes, such as registration information, subscription records, payment verification, customer support and security logs, we may act as a data controller.

Customer Invoice and Business Data

Where the Connector processes invoice, buyer, customer, Credit Note or related business information on behalf of a registered Manager.io business, that business will normally determine why the data is processed.

In such circumstances, the registered business may act as the data controller and we may act as a service provider or data processor to the extent applicable.

4. Information We May Process

Depending on how you use the Service, we may process the following categories of information.

Business and Tenant Information

• business or registered name;
• Seller TIN;
• tenant identifier;
• onboarding method;
• trial and subscription status;
• environment activation status;
• registration and activation dates; and
• business configuration information.

MBS/NRS Configuration

The Service may process environment-specific information necessary to connect a tenant to applicable MBS/NRS systems, including identifiers, URLs, API credentials, certificates, keys or related configuration information.

Sensitive configuration values are intended to be protected using appropriate security controls rather than displayed publicly.

Invoice and Credit Note Information

To provide e-invoicing functionality, the Connector may process information contained in or related to Manager.io Sales Invoices and Credit Notes, including:

• seller information;
• buyer or customer information;
• invoice or Credit Note references;
• dates;
• items and services;
• quantities and unit codes;
• prices and amounts;
• tax information;
• currencies;
• country information;
• HSN or service classifications;
• NRS/MBS processing status;
• IRNs;
• QR Code information; and
• payment-status information.

Payment and Subscription Information

We may process:

• payment amount;
• payment date;
• payment type;
• payment-provider or transaction reference;
• payment status;
• proof or verification information;
• subscription start and expiry dates; and
• renewal information.

We do not need your bank card PIN or online banking password to operate the Connector.

Technical Information

Our systems and hosting providers may process technical information required for operation and security, including:

• IP address;
• browser or device information;
• request date and time;
• requested pages or application routes;
• system events;
• error information;
• authentication events; and
• security or diagnostic logs.

Support Information

When you contact us, we may process your name, business name, phone number, email address, support messages, screenshots, error messages and other information you voluntarily provide.

5. Why We Process Information

We process information where reasonably necessary to:

• register and identify a Manager.io business;
• provide the trial;
• manage subscriptions and renewals;
• configure TEST and PRODUCTION environments;
• validate, sign, submit or monitor e-invoice transactions;
• write IRN, QR and status information back to Manager.io;
• synchronise payment status;
• verify payments;
• provide customer and technical support;
• detect fraud, misuse and security threats;
• diagnose faults and improve reliability;
• maintain backups and business continuity; and
• comply with applicable legal or regulatory obligations.

6. Lawful Bases for Processing

Depending on the circumstances, our lawful basis may include:

• Contract — where processing is necessary to provide the Service you or your business requested;
• Legal obligation — where processing or record retention is required by applicable law;
• Legitimate interests — where reasonably necessary to protect, operate, secure or improve the Service, provided those interests are not overridden by applicable privacy rights; and
• Consent — where consent is the appropriate lawful basis and is requested from you.

Where processing relies on consent, you may withdraw that consent subject to applicable law and any processing that is still necessary on another lawful basis.

7. Data Minimisation

We aim to process only information that is reasonably necessary for the relevant onboarding, invoicing, payment, security or support purpose.

Customers should avoid uploading or sending unnecessary personal information through support channels.

8. MBS/NRS and Manager.io Data Transmission

The primary purpose of the Connector is to transmit or synchronise information between Manager.io and the applicable MBS/NRS environment selected by the registered business.

Information returned by the relevant service may then be displayed or written back into Manager.io.

9. Third-Party Service Providers

We rely on third-party providers to operate parts of the Service. Depending on your use, these may include:

• DigitalOcean for application hosting, database infrastructure and related technical services;
• GitHub / GitHub Pages for public website hosting and software repository services;
• Selar for customer payment or checkout functionality where selected;
• Manager.io as the accounting application being integrated;
• applicable MBS/NRS systems used for e-invoice processing; and
• communications providers such as email or WhatsApp where you choose those support channels.

These organisations may process information under their own applicable terms, privacy policies and data-protection obligations.

10. International and Cross-Border Processing

Some infrastructure or service providers used by the Connector may process or store information outside Nigeria.

Where personal data is transferred internationally, we will seek to handle such transfers in accordance with applicable data-protection requirements and use appropriate safeguards where required.

Cloud, payment, source-code and communications providers may operate infrastructure in multiple countries.

11. Security

We take reasonable technical and organisational measures to protect information against unauthorised access, alteration, disclosure, loss or destruction.

Depending on the component, measures may include:

• HTTPS/TLS encrypted connections;
• encrypted storage of sensitive tenant configuration;
• business-scoped tenant isolation;
• restricted administrator access;
• access-token controls and rotation;
• tenant suspension and recovery controls;
• database access controls;
• logging and diagnostic monitoring;
• backups and recovery procedures; and
• separation of TEST and PRODUCTION processing.

No internet-based service can guarantee absolute security. Customers must also protect their own Manager.io access, credentials, devices and support information.

12. Credentials and Secrets

MBS/NRS credentials, access tokens, API secrets, certificates, private keys and database credentials should never be posted publicly.

Customers should not send such secrets through ordinary email, public GitHub repositories, public screenshots or unsecured messages unless specifically instructed through an appropriate secure process.

13. Data Retention

We retain information only for as long as reasonably necessary for the purpose for which it was processed, including:

• maintaining an active tenant or subscription;
• providing transaction history and support;
• maintaining security and audit records;
• payment, accounting or compliance requirements;
• resolving disputes or complaints; and
• maintaining appropriate backups.

Retention periods may differ depending on the type of record, applicable legal obligations and operational requirements.

When information is no longer reasonably required, it may be deleted, anonymised or securely removed, subject to lawful retention requirements and backup cycles.

14. Backups

Information may temporarily remain in backups after deletion from the active system.

Such backup copies are maintained for resilience and recovery and are expected to be replaced or removed through normal backup-retention cycles.

15. Public Website, Cookies and Analytics

As of the effective date of this Policy, the public Manager.io Nigeria E-invoice Connector website does not intentionally use advertising pixels or behavioural advertising trackers operated by us.

Hosting or infrastructure providers may nevertheless process basic technical information, such as IP addresses and HTTP requests, as necessary to deliver and secure the website.

If we later introduce optional analytics, advertising cookies or similar tracking technologies, this Policy and any required consent mechanism may be updated.

16. Payment Providers

Where you choose to make payment through Selar or another external provider, the payment provider may collect information directly from you.

Card information entered directly into the payment provider's checkout is subject to that provider's own processing and privacy arrangements.

The Connector may receive transaction references, amounts, payment status or other information necessary to verify or administer your subscription.

17. Support Through WhatsApp or Email

If you contact us through WhatsApp or email, your communication is also processed through the relevant communications provider.

Do not send passwords, private keys or unnecessary sensitive personal information through support messages.

18. Data Accuracy

Customers are responsible for ensuring that business, buyer, invoice and other information supplied through Manager.io is accurate and up to date.

If information relating directly to your account is incorrect, you may contact us to request appropriate correction.

19. Your Data Protection Rights

Subject to applicable law and the circumstances of the processing, you may have rights including:

• the right to be informed about processing;
• the right to access your personal data;
• the right to request rectification of inaccurate data;
• the right to object to certain processing;
• the right to request erasure where applicable;
• the right to data portability where applicable;
• the right to withdraw consent where processing relies on consent;
• rights relating to certain automated decision-making, including human intervention where applicable; and
• the right to lodge a complaint with the relevant regulator.

These rights may be subject to lawful limitations, including where records must be retained for legal, accounting, security or dispute-resolution purposes.

20. How to Exercise Your Rights

To make a privacy request, contact:

adek4971@gmail.com

Please provide enough information for us to identify the relevant account or record.

We may need to verify your identity or authority before disclosing, correcting or deleting information.

21. Requests Relating to Customer Invoice Data

If your personal information appears in an invoice or other document created by one of our registered business customers, that business may be the appropriate organisation to contact first regarding access, correction or deletion.

Where appropriate, we may assist the registered business in responding to a valid request concerning information processed through the Connector.

22. Data Breaches and Security Incidents

If we become aware of a personal-data breach affecting the Service, we will assess the incident and take reasonable steps to contain, investigate and remediate it.

Where notification to affected persons or a regulatory authority is required by applicable law, we will seek to comply with those obligations.

23. Children

The Connector is a business-to-business accounting and e-invoicing service and is not intended for use by children.

We do not knowingly design the Service for the collection of children's personal data.

24. External Links

Our website or Service may contain links to third-party sites, including Manager.io, Selar, GitHub or other external services.

Their privacy practices are governed by their own policies, and this Privacy Policy does not control information processed independently by those websites.

25. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the Connector, third-party integrations, security practices, applicable law or regulatory guidance.

The latest version will be published on this website with an updated effective date where appropriate.

26. Nigeria Data Protection Commission

Individuals may have the right to lodge a privacy complaint with the Nigeria Data Protection Commission where applicable.

27. Contact Us