Privacy Policy

Umbrelar is an AI marketing platform operated by Synquanta Technologies. This policy explains what personal data we collect, how we use it, who we share it with, and the rights you have — including data we access from Facebook and Instagram through the Meta Platform.

1. Who this policy applies to

Umbrelar serves businesses in Nigeria and beyond. This policy covers two groups of people:

• Account holders — the business owners and team members who create and use an Umbrelar account. For their data, Umbrelar acts as a data controller.
• End customers & leads — people who interact with a business through channels Umbrelar helps manage (for example, someone who messages a business on WhatsApp). For this data, Umbrelar acts as a data processor on behalf of the business, which remains the controller.

2. Data we collect

Account & identity

• Name and email address.
• Password, stored only as a secure one-way hash (bcrypt) — we never store your password in plain text.
• Email-verification status and the date you accepted our Terms of Service.

Security & technical

• IP address and device/browser information (user-agent), retained with session records for security and fraud prevention.
• Session and refresh tokens used to keep you signed in.

Business profile ("Brain")

• Business name, country and city, and industry.
• Marketing goals and monthly advertising budget.
• Brand details you provide: offerings/products, target audience, brand voice and tone, logo, and any brand documents or listings you upload.

Connected channels

• Identifiers for the accounts you authorize us to publish to: your Facebook Page ID, Instagram business account ID, and WhatsApp phone-number ID.
• We do not collect or store your Facebook or Instagram login credentials. See Section 4 for how the Meta connection works.

Content & creatives

• Content you create or that Umbrelar generates for you: ad copy, captions, generated images, posts, and publishing schedules. Generated images are stored in our cloud object storage and served over a content delivery network.

Leads & conversations (where enabled)

• When you use lead and messaging features, we process end-customer information on your behalf: WhatsApp phone number, name, qualification details (such as budget, timeline, and location), message content, and campaign attribution identifiers.

Billing

• Where paid plans apply, payments are handled by our payment processor (Paystack). We store subscription and customer references — not your full card details.

Usage & diagnostics

• Error and crash reports (which may include your user ID and email) to keep the service reliable, and operational logs of AI requests for cost and quality monitoring.

3. How we use data

• To provide, operate, and secure the Umbrelar service and your account.
• To generate marketing content and creatives based on your business profile.
• To publish content to the Facebook, Instagram, and WhatsApp accounts you connect.
• To create, run, and measure advertising campaigns you request (where enabled).
• To qualify and manage leads and conversations on your behalf (where enabled).
• To provide support, communicate with you, and send service and verification messages.
• To comply with legal obligations and enforce our Terms.

We do not sell your personal data, and we do not use your data or your customers' data to train our own general-purpose AI models.

4. Facebook & Instagram data (Meta Platform)

Umbrelar integrates with the Meta Graph API to publish content to the Facebook Pages and Instagram business accounts you authorize us to manage, and — where you enable it — to run and measure advertising and to read Page and post insights.

Through this integration we may access and process:

• Your Page and Instagram business account identifiers and the names of the assets you connect.
• Publishing permissions and publishing rate-limit status for those assets.
• Content we publish on your behalf (images, captions, posts).
• Where enabled: Page, post, and advertising performance metrics (insights).

We use Meta data solely to provide the publishing and advertising features you request. We do not sell Meta data, and we handle it in accordance with the Meta Platform Terms and Developer Policies. You can disconnect a channel at any time in Umbrelar's settings, and you may request deletion of associated data as described in Section 9 and on our Data Deletion page.

5. AI processing

To generate marketing content, Umbrelar sends relevant parts of your business profile and brand information (your "Brain") and your prompts to third-party AI providers that generate text and images on our behalf:

• Text generation — large language models accessed through OpenRouter and Cloudflare AI Gateway (including models from Google, OpenAI, and Anthropic).
• Image generation — fal.ai.

These providers process your data under their own terms to return the generated content to us. We do not authorize them to use your business or customer data to train their models beyond what is necessary to provide the service.

6. Third-party subprocessors

We rely on the following service providers to operate Umbrelar. Each processes personal data only as needed to provide its service to us.

7. How we share data

• With the platforms you connect — Meta (Facebook/Instagram) and WhatsApp, to publish and advertise as you direct.
• With subprocessors listed above, to operate the service.
• For legal reasons — where required to comply with law, respond to lawful requests, or protect our rights, users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell personal data.

8. Data retention

We keep your personal data for as long as your account is active or as needed to provide the service. When you close your account or request deletion, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records to comply with legal, tax, security, or audit obligations. See the Data Deletion page for how to request deletion.

9. Your rights

Under the Nigeria Data Protection Act 2023 (NDPA) and applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Obtain a portable copy of your data.
• Object to or restrict certain processing.
• Withdraw consent at any time, without affecting prior lawful processing.

You can exercise these rights from within Umbrelar (data export and deletion tools) or by emailing info@synquanta.com. If you are an end customer or lead of a business that uses Umbrelar, please contact that business directly, or contact us and we will assist the business as its processor.

10. Security

We protect data with measures including one-way password hashing (bcrypt), encryption of data in transit, scoped access controls, hashed one-time verification codes, and security audit logging. No system is perfectly secure, but we work to protect your information and to respond promptly to incidents.

11. International transfers

Some of our subprocessors operate outside Nigeria (for example, in the United States or the European Union). Where your data is transferred internationally, we take steps to ensure it remains protected consistent with this policy and applicable law.

12. Children

Umbrelar is a business tool intended for users aged 18 and over. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you. Continued use of Umbrelar after changes take effect constitutes acceptance of the updated policy.

14. Contact us

Synquanta Technologies — operator of Umbrelar
Email: info@synquanta.com