At Broadcast (https://broadcast.com.ng), we take data privacy seriously. This Privacy Policy explains how we collect, process, and secure personal data when you use our multi-tenant SaaS application, keeping fully in line with the Nigeria Data Protection Act (NDPA) and global privacy standards.
1. Information We Collect
As a software provider, we act primarily as a Data Processor for the information you upload to your workspace.
- Account Information: Name of organization/school, administrative email, phone number, and physical billing address.
- Recipient Directory (Your Data): Student names, parent names, class tiers, phone numbers, and transactional records (such as grade points or outstanding invoice balances) uploaded by your staff.
- Chat Logs: Inbound and outbound text messages, PDFs (report cards, receipts), and media sent or received via the connected WhatsApp Cloud API.
2. How We Use the Data
We use the collected information solely to power the communication delivery tools inside your dashboard:
- Operating your workspace and account.
- Formatting and dynamically rendering your PDF report cards and invoices.
- Sending bulk API requests to Meta to deliver messages to parents' devices.
- Providing real-time read, delivery, and click analytics inside your dashboard.
We do not sell, rent, or use your uploaded directory data or student lists to target ads or for any secondary commercial purposes.
3. Data Storage & Local Protection (NDPA Compliance)
- Encryption: All personal data, directory details, and chat logs are encrypted in transit via SSL/TLS and at rest on our secure cloud servers.
- Multi-Tenancy Isolation: Your tenant data is logically isolated from other organizations using Broadcast. Your administrative staff are the only ones with query access to your student/parent database.
- Data Retention: We retain your directory records as long as your subscription is active. Upon cancellation or non-renewal of your plan, your workspace data can be completely purged upon request.
4. Third-Party Data Sharing (Meta API)
To send messages, selected data components (such as parent phone numbers and text variables) are passed securely to the Meta Cloud API. Meta processes this information in accordance with the Meta Business Data Processing Terms. We do not share your private directory files or student academic grades with any third party other than the designated messaging gateway API.
5. Your Rights as a Data Controller
You, as the organization or school, are the Data Controller. It is your responsibility to:
- Ensure parents have consented to have their phone numbers stored in your Broadcast database.
- Assist parents in updating, modifying, or removing their records from your dashboard directory when requested.
6. Deleting Your Account
You can request deletion of your account and associated data at any time. See our Delete Account page for details on what gets removed and how to request it.