Privacy Policy

Litcode ("we", "us", or "our") operates the Litcode voice localization API and the LitPOS ESC point-of-sale application (collectively, the "Services"). This Privacy Policy explains what personal data we collect, how we use it, and your rights under applicable law — including the Nigeria Data Protection Act 2023 (NDPA).

By using any of our Services, you agree to the practices described in this policy. If you do not agree, please discontinue use and contact us to request deletion of your data.

All users (both Services):

• Name and email address provided at account registration
• Password (stored as a salted hash — never in plain text)
• Device information and IP address collected automatically when you use our Services
• Crash reports and error stack traces collected via Sentry for service reliability

Litcode API users (additional):

• API keys generated for your account
• API usage logs (request timestamps, endpoint called, response status)
• Billing and payment information processed via Flutterwave

LitPOS ESC users (additional):

• Business account information provided during setup
• Billing and payment information processed via Flutterwave

What we do not store: Audio content and voice data submitted to the Litcode API is processed in transit only. We do not retain raw audio files or voice recordings on our servers.

• Account management: To create and maintain your account, authenticate you, and send service-related communications.
• Service delivery: To provide, operate, and improve our API and applications.
• Payment processing: To process subscription and usage-based payments via Flutterwave.
• Error diagnosis: To identify, reproduce, and fix bugs using crash reports collected by Sentry.
• Security: To detect fraud, abuse, and unauthorised access to your account.
• Legal compliance: To meet our obligations under Nigerian law and other applicable regulations.

We do not sell your personal data to third parties.

We share limited data with the following trusted third parties to operate our Services:

• Flutterwave — Payment processing for both Litcode and LitPOS ESC. When you make a payment, your billing information is transmitted to and stored by Flutterwave under their own privacy policy. We do not store full card details on our servers.
• Sentry— Error monitoring and crash reporting for both Services. Sentry receives device information, IP addresses, and error stack traces to help us diagnose and fix issues. Data is processed under Sentry's privacy policy.

We require all third-party service providers to implement appropriate data protection measures consistent with this policy.

We retain your personal data for as long as your account is active. If you request account deletion, we will delete or anonymise your data within 30 days, except where we are required by law to retain it longer.

• Account data: Retained while your account is active, then deleted within 30 days of a deletion request.
• Payment records: Retained for a minimum of 6 years in accordance with Nigerian financial regulations.
• Crash/error logs: Retained for up to 90 days by Sentry before automatic deletion.
• API usage logs: Retained for up to 12 months for billing reconciliation and abuse prevention.

Under the Nigeria Data Protection Act 2023 (NDPA), you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to object: Object to the processing of your data for specific purposes.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at support@litcode.com.ng. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption in transit using TLS 1.2 or higher for all data transmissions
• Passwords stored as salted hashes using industry-standard algorithms
• Access controls limiting data access to authorised personnel only
• No retention of raw audio content or voice data submitted to the API

While we take reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password and to notify us immediately at support@litcode.com.ng if you suspect unauthorised access to your account.

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at support@litcode.com.ng and we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through a prominent notice within the Services at least 14 days before the changes take effect.

Your continued use of our Services after the effective date of an updated policy constitutes your acceptance of the changes. We recommend reviewing this page periodically.