Privacy Policy

01Who we are

Novagen AI Labs Limited ("Novagen", "we", "us") is an AI research and engineering company registered in the Federal Republic of Nigeria. We build voice AI applications, workflow automation, agent systems, sovereign AI infrastructure, and robotics for businesses.

This policy explains what personal data we collect through our website and services, why we collect it, and the choices you have. It is written to meet the Nigeria Data Protection Act 2023 (NDPA) and, where it applies to you, the EU General Data Protection Regulation (GDPR).

02Data we collect

We keep collection narrow. Depending on how you interact with us, we may collect:

• +Contact details you give us directly, such as your name, email address, company, and anything you include in a message or consultation request.
• +Business information shared during an engagement, such as requirements, documents, and system access agreed in a contract.
• +Technical data generated when you visit the site, such as IP address, browser type, pages viewed, and approximate region.
• +Communication records, including emails and meeting notes, kept so we can follow up accurately.

03Voice and client-project data

Our voice AI and automation products process data on behalf of the businesses that deploy them. In those cases the client is the data controller and Novagen acts as a data processor: we handle call audio, transcripts, and workflow data only under the client's instructions and the terms of a data processing agreement.

If you interact with a voice agent or automation we built for another business, that business's privacy policy governs the interaction. Contact them first; we will support any request they pass to us.

04How we use data

We use personal data to:

• +Respond to enquiries and consultation requests.
• +Deliver, operate, and support contracted services.
• +Improve our website and products, using aggregated or de-identified data wherever possible.
• +Meet legal, accounting, and regulatory obligations.
• +Protect our systems and users, including fraud and abuse prevention.

05Legal bases

Where the NDPA or GDPR applies, we rely on: your consent (which you can withdraw at any time), performance of a contract, our legitimate interests in running and securing our business, and compliance with legal obligations. We do not sell personal data, and we do not use your personal data to train models without a separate, explicit agreement.

06Sharing

We share personal data only with:

• +Service providers who host our infrastructure, email, and analytics, bound by contracts that limit their use of the data.
• +Professional advisers such as lawyers and accountants when necessary.
• +Authorities, where the law requires it.
• +A buyer or successor, if Novagen is involved in a merger or acquisition; this policy would continue to apply.

07International transfers

Some of our providers operate outside Nigeria. When data leaves the country we use safeguards recognised under the NDPA and GDPR, such as contractual data protection clauses and transfers to jurisdictions with adequate protection.

08Retention

We keep personal data only as long as we need it for the purposes above: enquiry records for up to 24 months after last contact, contract and financial records for the period required by law, and technical logs for up to 12 months. Client project data is retained or deleted according to the engagement contract.

09Security

We protect data with encryption in transit, access controls, least-privilege permissions, and vetted infrastructure providers. No system is perfectly secure; if a breach affects your data we will notify you and the Nigeria Data Protection Commission as the law requires.

10Your rights

Subject to the law that applies to you, you can:

• +Ask for a copy of the personal data we hold about you.
• +Ask us to correct or delete it.
• +Object to or restrict certain processing.
• +Ask for your data in a portable format.
• +Withdraw consent at any time, without affecting processing that already happened.
• +Complain to the Nigeria Data Protection Commission or your local supervisory authority.

11Cookies and analytics

Our website uses only the cookies and local storage needed to make it work, such as remembering that you have already seen the intro animation. If we add analytics, we will use privacy-respecting tooling and update this policy before it ships.

12Children

Our website and services are aimed at businesses and are not directed at children under 18. We do not knowingly collect data from children; if you believe we have, contact us and we will delete it.

13Changes

We will post any changes to this policy on this page and update the date at the top. If a change meaningfully affects your rights, we will tell you directly where we can.

14Contact

Questions, requests, or complaints: email contact@novagenlabs.ai and we will respond within 30 days.