Privacy policy

Last updated 29 October 2026

Atlas is a WhatsApp sales, support and customer-management service. It is a product of Media Buzz, the marketing arm of Arvex Creative Solutions Ltd (“we”, “us”), a company registered in Nigeria. This policy explains what personal data Atlas handles, why, and the choices you have. It is written to meet the Nigeria Data Protection Act 2023.

Who is responsible for what

• Your account. For the details of people who sign up and use Atlas (name, email, password, the workspaces they belong to), we decide how the data is used: we are the data controller.
• Your customers. For the messages, contacts and sales records a business keeps in its Atlas workspace, that business is the data controller and we process the data on its behalf, only to run Atlas for it (we are the data processor). Customers of a business using Atlas should contact that business first.

What we collect

• Account details: name, email address, a securely hashed password, your role in each workspace, and your progress in the in-app tour.
• Workspace data: business name and settings, team members and invitations, contacts (names, phone numbers, tags, marketing consent and opt-outs), conversations and messages, notes, leads and tasks, saved replies, automations and campaigns, and the business facts you give the AI assistant.
• WhatsApp data: when a business links a WhatsApp number, Atlas receives that number’s messages (including photos, voice notes and files), delivery and read receipts, and the list of people it chatted with before linking. The keys that keep the number linked are stored encrypted and are never shown to anyone.
• Google Contacts (optional): see “Google user data” below.
• Billing: the plan, payment amounts and dates, and a reference to the payment. Card details are entered on Flutterwave’s page, not ours; we keep only a masked card description (for example the last four digits) and an encrypted token Flutterwave gives us for renewals.
• Activity and security records: sign-ins, important changes in a workspace (who did what, and when), and technical logs such as IP address and browser type, used to keep Atlas secure and fix problems.

How we use it

• To provide Atlas: show messages, send the replies, campaigns and automated messages a business sets up, and keep its records.
• To answer customers with AI, when a business switches this on, using only the facts that business provided.
• To send service emails: account verification, password resets, invitations, and billing reminders.
• To take payments and renew plans.
• To keep Atlas secure, prevent abuse, and meet legal obligations.

We do not sell personal data, use it for advertising, or use a business’s data to train AI models. We do not message a business’s customers on our own behalf.

Consent and opt-outs

Atlas records whether each contact agreed to marketing. Campaigns only go to people who opted in, and anyone who replies STOP (or is marked as opted out) is not sent marketing again. Businesses are responsible for collecting consent lawfully from their own customers.

Google user data

A workspace owner can choose to link a Google account so that new customers are saved to Google Contacts. Atlas then requests access to that account’s email address and its contacts. Atlas uses this access only to:

• read the phone numbers already saved, so it does not create duplicates;
• create new contacts, under an “Atlas customers” label, for customers of that workspace; and
• import the account’s contacts into the workspace, when the owner asks.

Atlas never edits or deletes existing Google contacts, does not share Google data with anyone else, and does not use it for advertising or AI training. Unlinking (from the Contacts page) revokes Atlas’s access straight away; contacts already saved stay in Google. You can also remove access at myaccount.google.com/permissions.

Atlas’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share data with

Only the service providers we need to run Atlas, under their own data-protection terms:

• Google Cloud: hosting and the database (servers in South Africa).
• Google Gemini: to write AI replies, when a business turns them on. Only the conversation and that business’s facts are sent.
• Flutterwave: payments.
• WhatsApp (Meta): messages are sent and received through WhatsApp.
• Our email host: to deliver service emails.

We may also disclose data where the law requires it.

Where data is stored

Atlas runs on Google Cloud in Johannesburg, South Africa, so data leaves Nigeria. We rely on the safeguards the Nigeria Data Protection Act allows for such transfers, and our providers protect data in transit and at rest.

How long we keep it

• Account and workspace data: for as long as the account or workspace is active.
• When you ask us to delete an account or workspace, we delete or anonymise its data within 30 days, except records we must keep by law (for example payment records) and the workspace’s activity history, which is kept for security and accountability.
• Backups are overwritten within 14 days.

Security

Connections use HTTPS. Passwords are hashed, sessions are encrypted, and WhatsApp session keys and Google tokens are stored encrypted. Staff in a workspace only see what their role allows; agents cannot see or export the full contact list. No system is perfectly secure; if a breach affects your data, we will tell you and the regulator as the law requires.

Your rights

You can ask to see, correct, export or delete your personal data, object to or restrict how it is used, or withdraw consent. Email privacy@arvex.ng; we answer within 30 days. If you are a customer of a business that uses Atlas, contact the business directly; we will help it respond. You can also complain to the Nigeria Data Protection Commission.

Children

Atlas is for businesses and is not meant for anyone under 18.

Changes

If we change this policy in a way that matters, we will tell account owners by email or in the app before it takes effect. See also our terms of service.

Contact

Arvex Creative Solutions Ltd, Nigeria. Privacy questions: privacy@arvex.ng.