Privacy Policy
Review this document carefully. Print or download a dated copy for your records.
1. Scope and controller
This Privacy Policy explains how JENECONK Integrated Global Solutions Limited ("JENECONK") handles personal data through JENECONK Business Suite. It applies when you visit the site, open an account, use a workspace, create or upload a document, request AI assistance, make a payment, submit a complaint, or contact support.
JENECONK determines the purposes and means of processing described in this policy, subject to applicable Nigerian data-protection law. A customer may also be responsible for personal data about employees, applicants, tenants, clients, referees, beneficiaries, or other third parties that the customer places in a document.
2. Personal data we collect
Depending on your use, we may collect:
- Identity and contact data, including name, email address, telephone number, company, and account identifiers.
- Authentication and security data, including session records, multi-factor status, login events, device and browser information, IP-derived security signals, and fraud indicators.
- Workspace and document data, including answers, drafts, generated content, edits, selected templates, uploaded supporting files, extracted text, document history, and export records.
- Payment and billing data, including amount, currency, provider, status, reference, timestamps, document entitlement, and evidence supplied for manual verification. We do not intentionally store full payment-card numbers or banking passwords.
- AI and usage data, including document type, requested operation, processing status, usage units, model tier, error records, and limited technical metadata needed to provide and secure the feature.
- Support, complaint, and legal data, including messages, evidence, desired resolution, administrator notes, abuse reports, and records necessary to resolve disputes or comply with law.
3. Sources of data
We receive data directly from you, from members of your authorised workspace, from payment and authentication providers, from technical service providers, and from your interactions with the platform. If you provide another person's data, you confirm that you have a lawful basis and authority to do so and have given any notice required by law.
4. Purposes and lawful grounds
We process data to:
- Create, authenticate, and secure accounts and workspaces.
- Save drafts, generate or enhance documents, analyse authorised uploads, maintain versions, and deliver exports.
- Initiate and verify payments, apply entitlements, prevent duplicate or fraudulent unlocks, and maintain accounting records.
- Provide support, investigate complaints, administer narrow billing exceptions, and maintain an audit trail.
- Detect abuse, protect users and infrastructure, troubleshoot failures, and enforce platform terms.
- Improve reliability, measure aggregate platform activity, and understand feature performance without selling personal data.
- Meet contractual, legal, regulatory, tax, security, dispute-resolution, and law-enforcement obligations.
Depending on the circumstances, processing is based on performance of a contract, steps requested before a contract, compliance with legal obligations, legitimate interests in operating and securing the service, consent where specifically requested, or another lawful basis available under applicable law.
5. AI processing
When you request AI assistance or extraction from a supported file, relevant content may be securely transmitted to an approved AI or document-processing provider. Only information reasonably necessary for the requested operation should be submitted. Do not upload secrets or highly sensitive personal data unless necessary, authorised, and appropriate for the selected workflow.
AI providers process data under their applicable service arrangements. JENECONK does not authorise them to sell your document content. AI output and extracted text remain subject to user review and the retention rules described below.
6. Service providers and disclosures
We use providers for hosting, database infrastructure, storage, authentication, payments, AI processing, communications, monitoring, and security. They receive access limited to performing their functions and are expected to apply appropriate safeguards.
We may disclose information to professional advisers, payment institutions, auditors, insurers, regulators, courts, law-enforcement bodies, or other authorities where lawfully required or reasonably necessary to establish, exercise, or defend legal rights, prevent fraud, respond to a security incident, or protect a person from harm. We do not sell personal data.
7. International processing
Some providers may process data outside Nigeria. Where cross-border processing occurs, we use available contractual, organisational, and provider safeguards and assess the transfer in light of applicable requirements. By choosing a feature that requires an international provider, data may be processed in the provider's operating locations subject to those safeguards.
8. Retention
We keep information only as long as reasonably necessary for the relevant purpose. Generated documents and drafts remain until deleted by the user or the associated account is closed, subject to lawful exceptions. Deleted active records may remain in protected backups for a limited backup cycle. Audit and security logs are generally retained for 12 months; support and complaint records for 24 months; payment, fraud, tax, dispute, or legal records may be retained longer where reasonably necessary or legally required.
More detail appears in the Data Retention & Deletion Policy. Deletion of an individual record from a backup cannot always be performed immediately, but the record will not be restored to active use except for legitimate recovery, security, or legal purposes.
9. Security
We apply role-based access controls, protected server routes, authentication safeguards, multi-factor requirements for sensitive administration, service-role separation, restricted storage paths, HTTPS, payment verification, validation, operational logging, and managed infrastructure controls. No online service can guarantee absolute security. You must protect your password, email account, devices, and one-time codes and report suspected compromise promptly.
10. Your rights and requests
Subject to identity verification, applicable law, and lawful exceptions, you may request information about processing, access to eligible personal data, correction, deletion, restriction, objection, portability where applicable, withdrawal of consent for future consent-based processing, or review of a complaint. Withdrawal of consent does not invalidate earlier lawful processing.
Submit requests through the Submit Complaint page using the registered account email and select the privacy category. We aim to acknowledge a complete request within 2 business days. We may ask for identity verification and will respond within the period required by applicable law, or explain any lawful extension or refusal.
11. Children and sensitive data
Business Suite is not directed to children acting without appropriate parent, guardian, school, or organisational supervision. Do not submit a child's or vulnerable person's data unless you are authorised and the processing is necessary and lawful. Avoid uploading health, biometric, financial credential, government-secret, or similarly sensitive information unless essential and supported by an appropriate lawful basis.
12. Complaints and regulatory rights
Privacy complaints should first be submitted through the database-backed Submit Complaint page so we can investigate the relevant account, document, payment, and audit records. This does not remove any right to complain to a competent data-protection authority or seek another remedy available under applicable law.
13. Policy changes
We may update this policy where processing, providers, risks, or legal obligations change. The published version and updated date identify the operative policy. Material changes will be presented through an appropriate platform or communication channel where reasonably practicable.
14. Contact
Use the Submit Complaint page for privacy requests and include the registered email, request type, affected record, and sufficient detail. Never submit passwords, one-time codes, full card numbers, or banking passwords.