Privacy Policy
Last updated: 10 October 2026.
BODOS is a product of BOD GROUP LTD ("BODOS", "we", "us"). This policy explains what personal data we collect when you visit bodos.co, use the BODOS dashboard at app.bodos.co, or visit a website, shop, booking page, poll, event page or donation page that someone built with BODOS. It also explains what we do with that data and the rights you have.
We follow the Nigeria Data Protection Act 2023 (the "NDPA"). Where a person outside Nigeria uses BODOS, we also respect the data rules of their country as far as the law requires.
1. Who is responsible for your data
There are two roles, and it helps to know which one applies to you. When you create a BODOS account, BOD GROUP LTD is the data controller of your account data. We decide why and how it is used. When you use BODOS to run a business, you are the controller of the data of your own customers, visitors, subscribers, ticket buyers, donors and voters. We act as your processor: we store and handle that data for you and only as you instruct through the product. If you are a customer of a BODOS user and want to see or remove your data, please ask that business first. You can also write to us at hello@bodos.co and we will pass your request to them.
2. What we collect
Account details: your name, email address, phone number, business name and your password (stored only in a scrambled form that we cannot read). Business details you add: websites, pages, pictures, products, orders, customers, bookings, events, polls, donations and messages. Payment details: which plan you are on, when you paid and the reference of each payment. Card and bank details are entered with Paystack, our payment partner, and never reach BODOS. Identity details for donation organisers: if you collect donations above the free limit, we ask for a government ID (a National Identification Number or a driver’s licence) and the name on the bank account that receives the money. We use these only to check who you are. Use of the product: the pages you open, the actions you take and error reports, so we can keep the service working and safe. Visit counts on public sites: a count of visits, the page, the country and the device type. We do not store the visitor’s IP address with these counts. Messages to us: what you write when you contact support or fill in a form on bodos.co.
3. Why we use your data
We send marketing email only to people who asked for it, and every such email has a way to stop receiving it. We do not sell your personal data. To create and run your account and to deliver what you ordered (our contract with you). To take payments, send receipts and invoices, and stop fraud. To check the identity of donation organisers and to hold and release donation money correctly. To send messages about your account, such as sign-in codes, security alerts, billing and service notices. To answer your questions and give support. To keep BODOS safe, find mistakes, and improve it (our legitimate interest). To meet the law, for example tax and record keeping, and to answer lawful requests from the authorities.
4. Who we share it with
We share data only with people who need it to give you the service, and only what they need: Paystack, to take card, transfer and USSD payments. BODPay and its banking partners, to hold donation money and pay it out to the organiser’s bank account. Brevo, to send emails such as sign-in codes and receipts. Our hosting provider (Vultr), where the servers that store your data run. WhatsApp message providers, only when you switch on WhatsApp order updates. Professional advisers, courts, regulators and the police, when the law requires it. A buyer of our business, if BOD GROUP LTD is ever sold or merged. We would tell you first and the same protections would continue.
5. Where your data is kept and sent
Our servers may be outside Nigeria. When your data is sent to another country we make sure the receiving company protects it to a standard that is at least as strong as the NDPA requires, for example through a written agreement.
6. How long we keep it
When you delete your account, we delete or anonymise your data unless the law says we must keep a copy. Account data: for as long as your account is open, and for a short time after it closes so we can handle disputes. Payment and invoice records: for the period tax and accounting law requires. Identity documents for donation organisers: for as long as the organiser collects donations and for the period the law requires after the last payout. They are then deleted. Email and sign-in logs: a limited time, then removed.
7. How we protect it
All traffic to BODOS is encrypted in transit. Passwords are stored in a scrambled form. Staff see only what they need to do their job. Identity documents are stored privately, outside any public folder, and only a small number of authorised staff can open them. You can switch on two-step sign-in on your account. No system is perfectly safe. If a breach puts your personal data at risk, we will tell you and the Nigeria Data Protection Commission within the time the NDPA sets.
8. Cookies and similar tools
We use only the small files that BODOS needs to work: to keep you signed in, to remember choices such as your language, and to keep a basket on a shop. We do not use advertising cookies and we do not track you across other websites. If we ever add analytics tools that need your consent, we will ask first. You can clear or block cookies in your browser, but parts of BODOS may then not work.
9. Your rights
Under the NDPA you have the right to: Know what data we hold about you and get a copy. Ask us to correct data that is wrong. Ask us to delete your data, where we have no legal duty to keep it. Object to or ask us to limit how we use your data, including for marketing. Take your data to another service in a common format. Withdraw a consent you gave, at any time. Complain to the Nigeria Data Protection Commission if you think we have broken the law.
10. Children
BODOS is for people aged 18 and over. We do not knowingly collect data from children. If you think a child has given us their data, write to us and we will delete it.
11. Changes to this policy
We will update this page when our practices change and show the date at the top. For a big change we will also email account owners.
12. Contact us
BOD GROUP LTD, Nigeria. For any question about this policy, or to use any of your rights, write to hello@bodos.co. We reply within two working days and finish rights requests within the time the law allows.