Privacy Policy

Effective 28 September 2026

Your privacy matters to us. This Policy describes the personal data VoterAI collects, why we collect it, who we share it with, and the choices and rights available to you.

1. Who we are

VoterAI is owned and operated by Ozmek Technologies LTD (“Ozmek”, “we”, “us”), a company incorporated in Nigeria. This Privacy Policy explains how we collect, use, share and protect personal data when you use the VoterAI platform (the “Service”), in line with the Nigeria Data Protection Act 2023 (“NDPA”).

Capitalised terms not defined here have the meaning given in our Terms of Service.

2. Our role for different data

  • Account and usage data (about campaign staff, Team Members and agents): Ozmek is the data controller.
  • Voter Data: Voter Data is owned by Ozmek as set out in the Terms of Service. Ozmek and the campaign that uploads or collects it each act as controllers. The campaign is responsible for having a lawful basis for the data it uploads and the messages it sends; Ozmek is responsible for how it stores, secures and otherwise uses Voter Data.

3. Data we collect

Information you give us

  • Account details: name, email address, phone number, password (stored hashed), role and Workspace.
  • Campaign details: candidate name, office sought, contest, state, LGA, ward and election year.
  • Billing and verification details: billing contact, transaction references, and Bank Verification Number (BVN) where required to issue a dedicated funding account. Card details are entered directly with our payment processors; we do not store full card numbers.
  • Agent and payout details: bank name, account number and verified account name of polling unit agents and other payees.
  • Sender ID applications: proposed sender name, organisation name, use case and sample messages.

Voter Data

  • Voter registers and contacts uploaded or entered by campaigns, which may include names, voter identification numbers (VIN), phone numbers, email addresses, addresses, gender, age range, polling unit, ward, LGA and state.
  • Field data captured by Team Members, such as canvass outcomes, support levels, pledges, notes, intelligence reports, and the identity of the Team Member who added or updated a record.
  • Messaging records: SMS, email and WhatsApp campaigns, recipients, delivery status and opt-outs.

Information collected automatically

  • Device location when a Team Member records a field activity, where the device grants permission.
  • Log and device data: IP address, browser, device type, pages visited, actions taken and timestamps.
  • Cookies and local storage used to keep you signed in, remember your active contest and let field work continue offline. We do not use advertising cookies.

4. How we use data and our lawful bases

  • To provide the Service (performance of contract): creating Workspaces, managing teams, storing and displaying voter registers, maps, reports and exports, and sending messages you initiate.
  • To process payments and payouts (contract and legal obligation): subscriptions, messaging wallet funding, agent stipends and bank account verification.
  • To secure and improve the Service (legitimate interests): fraud prevention, abuse detection, audit logs, troubleshooting, analytics and product development, including creating aggregated or de-identified data.
  • To communicate with you (contract and legitimate interests): invitations, receipts, service notices and support.
  • To comply with law (legal obligation): responding to lawful requests from courts, regulators and law enforcement, and meeting tax, accounting and electoral obligations.
  • With your consent, where we ask for it. You may withdraw consent at any time without affecting prior processing.

We do not sell personal data.

5. How we share data

We share personal data only as needed with:

  • Your Workspace: administrators and authorised Team Members of the campaign, according to their role.
  • Service providers acting on our instructions, including cloud hosting and database providers, SMS, email and WhatsApp delivery providers, payment processors, virtual account and payout providers, and bank account verification services.
  • Authorities, where required by law or to protect the rights, safety or property of Ozmek, our users or the public.
  • Successors, in connection with a merger, acquisition, financing or sale of all or part of our business.

We do not make one campaign's identifiable Workspace data available to another campaign.

6. International transfers

Some of our service providers store or process data outside Nigeria. Where this happens, we rely on the transfer mechanisms permitted under the NDPA, such as adequacy, contractual safeguards or other lawful grounds, and require providers to protect the data to a standard consistent with this Policy.

7. How long we keep data

We keep account data for as long as your account is active and for a reasonable period afterwards to meet legal, tax, accounting and audit requirements, resolve disputes and enforce our agreements. Voter Data and Workspace data may be retained, archived or deleted after a subscription ends at our discretion, in accordance with the Terms of Service and applicable law. Aggregated or de-identified data may be kept indefinitely.

8. Security

We use industry-standard safeguards, including encryption in transit, encrypted storage, role-based access controls, Workspace isolation, hashed passwords and audit logging. No system is completely secure, and we cannot guarantee the absolute security of any data. If we become aware of a personal data breach that is likely to result in a risk to individuals, we will notify the Nigeria Data Protection Commission and affected persons as required by law.

9. Your rights

Subject to the NDPA, you have the right to:

  • be informed about and access personal data we hold about you;
  • have inaccurate data corrected;
  • have data erased where there is no lawful reason to keep it;
  • restrict or object to certain processing;
  • receive your data in a portable format;
  • withdraw consent where processing relies on consent; and
  • lodge a complaint with the Nigeria Data Protection Commission.

To exercise these rights, email hello@voterai.ng. We may need to verify your identity before responding, and we will respond within the time required by law.

10. If you received a message from a campaign

Campaigns use VoterAI to contact voters. If you received an SMS, email or WhatsApp message and no longer wish to be contacted, reply STOP where offered, contact the campaign directly, or email us at hello@voterai.ng with your phone number or email address and the campaign name. We will help you exercise your rights.

11. Children

The Service is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child's data has been provided to us, contact us and we will take appropriate steps.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date. Where changes are material, we will take reasonable steps to notify you.

13. Contact

Questions about this Policy or our data practices can be sent to Ozmek Technologies LTD at hello@voterai.ng.