This policy applies to the Service, its web interfaces, account features, integrations and related support activities. Read it with the Terms of Service and any applicable data-processing agreement.
This Privacy Policy explains how 9AppSoft ("we", "us" or "our") collects, uses, stores and shares personal data when you visit, register for or use Nexpostly by 9AppSoft (NEXPOSTLY). The Service helps businesses plan, create, review, schedule, publish and analyse social-media content.
For account, subscription, platform-security and direct customer relationship data, 9AppSoft generally determines the purposes and means of processing and acts as a data controller. Where a business customer uploads personal data about its own customers, employees, prospects or contacts, that customer generally determines the purposes and means of processing and 9AppSoft processes that data on its instructions to provide the Service.
Depending on the features used, we may process: (a) account details such as name, work email, telephone number, username, password hash, role and authentication events; (b) workspace and business details such as business name, industry, contact details, brand voice, products, services and time zone; (c) content such as prompts, captions, drafts, generated text, uploaded images, approvals and schedules; (d) social integration details such as connected Page/account identifiers, granted permissions, OAuth records, access tokens and publishing logs; (e) technical and usage details such as IP address, browser/device information, timestamps, diagnostic and security logs; (f) subscription and transaction details such as plan, invoice, payment amount, currency, transaction reference and status; and (g) support messages and platform analytics made available through authorised APIs.
We do not ask you to provide your social-network password. Payment credentials are handled by the relevant payment provider; we do not intend to store full payment-card details.
We use information to create accounts and workspaces; authenticate users and administer roles; provide AI-assisted content generation, media storage, approvals, scheduling, publishing and analytics; connect social accounts; process subscriptions, payments, invoices and usage limits; provide support; secure and troubleshoot the Service; prevent fraud and abuse; improve service performance; communicate service notices; and comply with legal obligations or establish, exercise or defend legal claims.
Where the Nigeria Data Protection Act 2023 applies, we rely on an appropriate lawful basis for each purpose. Depending on the circumstances, this may include performance of a contract, steps taken at your request before a contract, compliance with a legal obligation, vital interests, public interest where applicable, legitimate interests that are not overridden by your rights, or consent where consent is the appropriate basis. Consent may be withdrawn without affecting processing already lawfully carried out.
When you use AI features, prompts, business descriptions, product information, text or other inputs may be sent to the configured AI provider, including Google Gemini for text generation and Pollinations or another configured provider for image generation. Those providers process submitted information to return outputs and may process technical information under their own terms and privacy documentation.
Do not submit sensitive personal data, confidential information or another person's information unless you have authority and a lawful basis. Review AI-generated content for accuracy, legality, suitability and rights before use. AI output may be inaccurate, incomplete, non-unique or unsuitable. Provider retention, training, hosting and transfer practices depend on the provider and configuration actually enabled.
When you connect a Facebook Page or another supported account, you authorise the Service to access data and perform actions covered by the permissions shown in the platform authorisation flow. Depending on permissions and API availability, this may include identifying a Page, reading permitted account information, publishing content you approve and retrieving permitted performance metrics.
We use social-platform data to provide, secure and support the features you request, subject to platform terms, developer policies and your instructions. We do not sell social-platform data. You can disconnect an account in the Service where that control is available or revoke access through the platform. Revocation may stop connected features. Disconnecting an account and deleting data held by 9AppSoft are separate actions.
We may share data with hosting, infrastructure, database, security and support providers; AI providers used for requested features; social platforms you connect; payment processors such as Paystack or Flutterwave where enabled; professional advisers; regulators or authorities where legally required; and a successor entity in a merger, restructuring or asset transfer. Providers may process information only for specified service purposes and subject to appropriate safeguards. We do not sell personal data for money.
Some providers may process data outside Nigeria or your country. Where applicable, we will take steps required by data-protection law, which may include assessing the recipient and destination, using appropriate contractual safeguards or another recognised transfer mechanism, and providing required information.
We retain personal data for as long as reasonably necessary to provide the Service, administer subscriptions, maintain security and audit records, resolve disputes and comply with law. Actual periods depend on data type and purpose. You may request account closure or deletion by contacting us. We will verify and process requests under applicable law and our contractual obligations. Some information may remain in backups for a limited period or be retained for legal, accounting, fraud-prevention or dispute purposes.
We use technical and organisational safeguards designed to protect data, which may include role-based access controls, authentication, secure communications, password hashing, encryption of social access tokens where implemented, logging, backups and restricted staff access. No online system can be guaranteed completely secure. Protect your credentials and notify us promptly of suspected compromise.
Subject to applicable law and exemptions, you may have rights to be informed, access personal data, correct inaccurate information, request erasure, restrict or object to processing, withdraw consent, request portability and not be subject to certain solely automated decisions. Contact us to exercise a right; we may need to verify your identity. If we process data on behalf of a business customer, we may refer your request to that customer or assist it in responding. You may also complain to the Nigeria Data Protection Commission or another relevant supervisory authority.
Business customers are responsible for providing required notices and lawful bases for personal data they upload about their own customers, employees, prospects or contacts. Where required, a separate data-processing agreement should govern that processing.
The Service may use necessary cookies or similar technologies for authentication, security, sessions and preferences. If analytics or advertising cookies are enabled, we will provide notice and choices where required. Disabling essential cookies may affect the Service.
The Service is designed for businesses and is not directed to children. Do not create an account for a child or submit children's personal data unless you have the required authority, lawful basis and any required parental or guardian authorisation.
We may update this policy to reflect changes to the Service, processing activities or legal requirements. We will publish the revised version with an updated effective date and provide additional notice where required.
Privacy contact: 9AppSoft
Email: info@9appsoft.com.ng
Telephone: +234 703 249 9237
Website: 9appsoft.com.ng
Business location: Lagos, Nigeria