Privacy Policy

MyVirtualAdmin (“MVA”, “we”, “us”) provides an AI-powered admin workspace for small businesses in Nigeria. For the purposes of the Nigeria Data Protection Act 2023 (NDPA), we act as the data controller for your account information and as a data processor for the business records you choose to store in your workspace.

• Account information — your name, email address, password (stored encrypted, never in readable form) and the date you accepted our terms.
• Business profile — business name, contact details, branding, services, bank details you choose to add for invoices, and operating information.
• Business records you create — customers, invoices and quotations, payments, expenses, tasks and documents.
• Ask MVA conversations — the messages you send to the assistant and the drafts it returns.
• Beta feedback — what you report to us, the page you were on, your device type and any screenshot you attach.
• Basic technical information — sign-in times and information needed to keep the service secure and working.

To run your workspace, generate your invoices and documents, give Ask MVA the context it needs to be useful, keep your account secure, respond to your support requests, and improve the product during the beta. We do not sell your information, and we do not use your customer records for advertising.

When you use Ask MVA, the relevant parts of your business profile and workspace data are sent to a third-party AI model provider so a reply can be generated. That processing is transient — the provider is contractually restricted from using your data to train their models. If you would rather not share particular information, simply do not include it in your profile or in your messages.

Your workspace is hosted on secure managed cloud infrastructure, which may store and process data outside Nigeria. Where data leaves Nigeria, we rely on providers that offer contractual safeguards consistent with the NDPA's requirements for cross-border transfers.

Only you and anyone you invite into your workspace. Every table in our database enforces row-level security, so one business can never read another business's records. A small number of MVA staff can access systems for support and maintenance, under confidentiality obligations, and only when needed to resolve an issue you have raised.

We use service providers for hosting, database, email delivery and AI generation. They act on our instructions only.

For as long as your account is active. If you ask us to delete your account, we remove your workspace data within 30 days, except where we must keep limited records to meet a legal obligation.

Under the NDPA you can ask us to give you a copy of your data, correct it, delete it, or restrict how we use it, and you can object to processing or withdraw consent at any time. You can export your data or request deletion yourself from Settings → Privacy & data, or email privacy@myvirtualadmin.ng. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

Data is encrypted in transit and at rest, access is protected by your password, and workspace isolation is enforced at the database level. No system is perfect — if a breach ever affects your data, we will tell you and the NDPC promptly.

MyVirtualAdmin is in private beta. Features change often and occasional faults are possible. Please keep your own copies of anything critical — you can print or export invoices and documents at any time.