Privacy Policy

ReachNG is a communication and customer engagement platform operated by Stallion Digitals Limited.

For purposes of applicable data protection laws, ReachNG may act as a Data Controller, a Data Processor, or a Data Controller/Processor depending on the nature of the Services provided.

A. Account Information

• Full name
• Company name
• Business registration details
• Email address
• Phone number
• Billing information
• Login credentials

B. Service Usage Information

• SMS records
• OTP transactions
• Voice call records
• IVR activity logs
• API requests
• Delivery reports
• Call routing information
• Message metadata

C. Technical Information

• IP addresses
• Browser information
• Device identifiers
• Operating system information
• Application logs
• Security logs

D. Payment Information

• Transaction references
• Payment confirmations
• Billing records
• Account balances

Payment card information may be processed by authorized third-party payment providers.

Customers may use ReachNG to process personal information relating to their end users, including:

• Phone numbers
• Names
• Customer identifiers
• Authentication details
• Communication records

In such cases, ReachNG acts primarily as a Data Processor and processes information solely in accordance with customer instructions and applicable law.

Customers remain responsible for obtaining all required consents and legal bases for processing personal data.

We use information to:

• Deliver Services
• Route messages and calls
• Authenticate users
• Generate delivery reports
• Provide customer support
• Improve platform performance
• Detect fraud and abuse
• Ensure security
• Comply with legal obligations
• Generate analytics and operational insights
• Enforce our Terms of Service

Where applicable, ReachNG processes personal data based on:

• Consent
• Contractual necessity
• Legal obligations
• Legitimate business interests
• Protection of vital interests

as recognized under applicable data protection laws.

ReachNG may share information with:

Telecommunications Providers

To facilitate message and call delivery.

Cloud Infrastructure Providers

To host and operate platform services.

Payment Service Providers

To process transactions and billing.

Professional Advisors

Including auditors, lawyers, and consultants.

Regulatory Authorities

Where disclosure is required by law, court order, regulation, or lawful request.

ReachNG may store or process information in jurisdictions outside Nigeria.

Where international transfers occur, ReachNG will implement reasonable safeguards designed to ensure an adequate level of protection consistent with applicable data protection laws.

ReachNG retains information only for as long as necessary to:

• Provide Services
• Meet contractual obligations
• Comply with legal requirements
• Resolve disputes
• Prevent fraud
• Protect platform security

Retention periods may vary depending on applicable laws, regulatory requirements, and operational needs.

ReachNG implements commercially reasonable technical, organizational, and administrative safeguards including:

• Access controls
• Authentication mechanisms
• Encryption where appropriate
• Security monitoring
• Audit logging
• Infrastructure protection measures

Despite these safeguards, no electronic transmission or storage system can be guaranteed to be completely secure. Accordingly, ReachNG cannot guarantee absolute security.

Customers are responsible for:

• Obtaining necessary consents
• Providing privacy notices to their users
• Maintaining lawful processing activities
• Complying with applicable privacy laws

ReachNG shall not be liable for a customer's failure to satisfy legal or regulatory obligations relating to personal data.

Subject to applicable law, individuals may have rights including:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to object
• Right to data portability
• Right to withdraw consent

Requests may be submitted to:

ReachNG may require verification of identity before fulfilling requests.

ReachNG is committed to complying with the Nigeria Data Protection Act 2023 and applicable regulations issued by the Nigeria Data Protection Commission (NDPC).

Where ReachNG processes personal data subject to Nigerian law, we undertake to:

• Process data lawfully, fairly, and transparently.
• Collect data only for specified and legitimate purposes.
• Limit processing to what is necessary.
• Maintain reasonable data accuracy.
• Implement appropriate security measures.
• Respect data subject rights.
• Maintain accountability for data processing activities.

Where ReachNG acts as a Data Processor, the customer remains responsible for determining the lawful basis for processing personal data.

ReachNG may use cookies, session identifiers, and similar technologies to:

• Improve platform functionality
• Maintain user sessions
• Analyze platform performance
• Enhance security

Users may configure browser settings to refuse certain cookies, though some functionality may be affected.

ReachNG may utilize artificial intelligence and machine learning systems to generate analytics, recommendations, summaries, operational insights, and communication performance reports.

AI-generated outputs are provided for informational purposes only and should not be relied upon as legal, financial, regulatory, or professional advice.

ReachNG Services are not intended for children under the age required by applicable law.

We do not knowingly collect personal information from children without appropriate authorization.

In the event ReachNG becomes aware of a personal data breach affecting personal information under our control, we will take reasonable steps to investigate, mitigate, and where required by applicable law, notify affected parties and relevant regulatory authorities.

To the fullest extent permitted by law, ReachNG shall not be liable for:

• Unauthorized access caused by customer negligence.
• Third-party cyberattacks.
• Telecommunications failures.
• Internet disruptions.
• Customer misuse of Services.
• Indirect or consequential losses arising from data processing activities.

Nothing in this Policy limits rights that cannot legally be excluded under applicable law.

ReachNG reserves the right to update this Privacy Policy from time to time. Updated versions become effective upon publication on the ReachNG website or platform.

Continued use of the Services constitutes acceptance of any revised Privacy Policy.

For privacy-related questions, complaints, or requests, contact:

ReachNG — A Product of Stallion Digitals Limited

If you believe your rights have been violated, you may also contact the Nigeria Data Protection Commission (NDPC) or another competent regulatory authority.