Privacy policy

Who we are

Hazie is software for made-to-order shops in Nigeria: orders, deposits, production stages and payments, and, if a shop chooses, its WhatsApp chats. Hazie is run by Hazie.org Limited (“Hazie”, “we”). Questions about this policy or your data go to [email protected].

We hold two kinds of information. Your account — for the people who sign in to Hazie — is ours to look after. A shop’s records — its customers, orders and chats — belong to the shop; we keep and process them on the shop’s behalf and on its instructions. If you are a customer of a shop that uses Hazie, the shop decides what is recorded about you; ask the shop first, and we will help it answer.

What we collect

• Account details: your name, email address and password (stored only as a one-way hash), the shops you belong to and your role in each, and your two-factor settings if you turn them on.
• A phone number for approvals, if you add one: we send a code to it on WhatsApp to check it is yours, and then send you orders to approve if you ask us to.
• Sign-in records: when you signed in, from which IP address and browser — used to keep accounts safe and to show you where you are signed in.
• A shop’s records: products and photos, customers’ names, phone numbers and delivery addresses, orders, payments, invoices and receipts, and the history of each order.
• Payments: when a customer pays through a Hazie payment link, the payment is taken by Paystack. We receive the amount, the reference and the outcome — never the full card number.
• WhatsApp, only if a shop connects it: the messages in its one-to-one chats (including up to six months of earlier history, which WhatsApp copies when it connects), its WhatsApp contacts, and the delivery status of messages. Photos are fetched only when someone opens them; voice notes are not fetched. The access WhatsApp gives us is stored encrypted. Group chats are not copied.

How we use it

• To run the service: record orders and payments, keep a shop’s books, and show its chats beside its orders.
• To send messages a shop has switched on — for example “deposit received” or “ready for pickup” — from the shop’s own WhatsApp number. Each kind of message has its own switch.
• To send account emails: sign-in codes, invitations and password resets.
• To keep Hazie secure, prevent fraud and meet our legal and accounting duties.

We do not sell personal data, and we do not use it for advertising.

Finding orders in chats

A shop can switch on “Find orders in chats”. It is off until the shop’s owner agrees, and the agreement is recorded with their name and the time. When it is on, the text of each new message a customer sends is checked by an AI service, TypeSafe, which is outside Nigeria, to see whether it is an order. Names, phone numbers and photos are never sent; neither are the shop’s own messages or the copied history. The result is only ever a draft order for the shop to check: prices come from the shop’s own catalog, and nothing is sent to a customer or charged until a person approves it.

Who we share it with

Only the services that make Hazie work, each for its own part:

• Meta (WhatsApp) — to receive and send a connected shop’s WhatsApp messages.
• Paystack — to take payments made through Hazie payment links.
• TypeSafe — message text only, when a shop has switched on finding orders in chats.
• Cloudinary — to store product and order photos.
• Resend — to deliver account emails.
• Clerk — only if you choose “Continue with Google” to sign in.
• Railway — hosts our servers and database, in the European Union.
• Cloudflare — delivers our website securely, measures visits without cookies, and forwards email sent to hazie.org addresses.

We also disclose information when the law requires it. If Hazie is ever sold or merged, this policy would continue to apply to the information we hold.

Where it is stored

Our database is hosted in the European Union, and some of the services above are in other countries. When information leaves Nigeria we rely on the safeguards the Nigeria Data Protection Act 2023 allows, and we only send what each service needs.

How long we keep it

We keep account and shop information while the account is open. Financial records — orders, payments, invoices and the books they form — are kept for as long as the law requires a business to keep its accounting records, even after an account closes. When a shop disconnects WhatsApp, we stop receiving its messages; the chats already copied stay with the shop’s records until the shop asks us to delete them.

Your rights

Under the Nigeria Data Protection Act 2023 you can ask to see the personal data we hold about you, to correct it, to have it deleted, to receive a copy, or to object to how it is used. Email [email protected]. If you are not satisfied with our answer you can complain to the Nigeria Data Protection Commission.

Deleting your data

• Stop WhatsApp at any time: in Hazie, open Shop settings › WhatsApp › Disconnect WhatsApp; and in the WhatsApp Business app, Settings › Account › Business Platform › Disconnect. We stop receiving messages straight away.
• Delete your account or a shop’s data: email [email protected] with the subject “Delete my data” from the email address on the account. We will confirm who you are, delete what we are allowed to, tell you what the law requires us to keep and why, and reply within 30 days.

Keeping it safe

Everything travels encrypted. Each shop’s records are kept apart from every other shop’s by the database itself, not only by our code. Access keys for WhatsApp and payment providers are stored encrypted and are never shown again after they are entered. Two-factor sign-in is available to every account.

Cookies

We use a cookie to keep you signed in, and a short-lived one while you connect WhatsApp. There are no advertising or tracking cookies.

Children

Hazie is for businesses and is not meant for anyone under 18.

Changes

When we change this policy we update the date at the top, and tell account holders of any important change before it takes effect.