Jagora

Privacy policy

Last updated: 19 October 2026

This policy explains what personal data Jagora handles, why, and your rights under the Nigeria Data Protection Act 2023. Jagora is run by Asfartec. Contact us about privacy at [email protected].

1. Who is responsible

  • For staff data a company enters (agents, team leads, admins): the company is the data controller. Asfartec processes that data for the company, on its instructions.
  • For people who sign up, book a demo or contact us: Asfartec is the data controller.

2. What we collect

  • Account details: name, phone number, email (optional for staff), role, team and site.
  • Work records: daily reports (date, counts, notes and any fields the company adds), devices held, device faults, approvals and rejections.
  • Pay details: bank name, account number and account name, payment amounts and payslips.
  • Location: when the mobile app is used, the location of the phone at the moment a report is sent, if the person allows it.
  • Security records: sign-ins, IP addresses and an audit log of changes.
  • Demo requests: what you type in the contact form.

Jagora must not be used to store enrollees' data (their names, NINs or biometrics), and we do not ask for it.

3. Why we use it

  • To provide the service the company signed up for: reports, targets, pay and payouts (contract).
  • To keep accounts secure and prevent fraud, for example by holding payouts to newly changed bank accounts and telling people when their bank details change (legitimate interest).
  • To send service messages by SMS and email, such as reminders, password reset codes and payment notices (contract).
  • To keep invoices and payment records the law requires (legal obligation).

We do not sell personal data and do not use it for advertising.

4. Who we share it with

Only with service providers that help us run Jagora, under contracts that protect the data:

  • Payment providers (Paystack, Bachs) for top-ups, account-name checks and payouts.
  • SMS and email providers to deliver messages.
  • Hosting, backup and security providers (our servers and Cloudflare), and error monitoring with personal data removed.

Some of these providers store data outside Nigeria. When that happens we rely on the safeguards the Nigeria Data Protection Act allows, such as contracts that require the same level of protection. We share data with authorities only when the law requires it.

5. How long we keep it

  • Company data is kept while the company uses Jagora. After an account is closed, we delete or anonymise it within 90 days, except invoices and payment records, which we keep for six years as the law requires.
  • Daily database backups are kept for a limited time and then deleted.
  • Demo requests are deleted within 12 months if you do not become a customer.

6. How we protect it

Data is sent over encrypted connections. Each company can only see its own data. Admins sign in with two-factor codes, every change is logged, and backups are stored separately with their own access keys.

7. Your rights

You can ask to see, correct, export or delete your personal data, or object to how it is used. If you are an agent or team lead, ask your company first, since it controls your records; you can also write to us and we will pass your request on. You can complain to the Nigeria Data Protection Commission (NDPC).

8. Cookies

Jagora uses only the cookies needed to keep you signed in and to protect forms. Visitor statistics on the public pages use Cloudflare Web Analytics, which sets no cookies.

9. Changes

We will post any changes here and tell company admins about important ones.