Privacy notice
Plain language: what we collect, why, how long we keep it, and your rights.
Summaries: Pidgin, We only collect wetin Shiro need. Your business record na your own; you fit download am or delete am. We no dey sell your data. Yorùbá, A máa ń gba ohun tí Shiro nílò nìkan. Àkọsílẹ̀ iṣẹ́ rẹ jẹ́ tìrẹ; o lè ṣe ìgbàsílẹ̀ rẹ̀ tàbí pa á rẹ́. A kì í ta dátà rẹ.
What we collect and why
| Information | Why we need it | How long we keep it |
|---|---|---|
| Full name | To greet you and show on receipts | While your account exists |
| Phone number | To sign you in and send one-time codes | While your account exists |
| Location (optional) | To support regional language and market words | While your account exists |
| Preferred language | To speak and show Shiro in your language | While your account exists |
| Age confirmation (18+) | Shiro is for adults; we ask for a declaration, not your date of birth | While your account exists |
| Business details | To set up your accounts and suggest sensible defaults | While your account exists |
| Transactions and ledger | Your books, the core of the service | While your account exists, then any legally required period |
| Transcripts of what you said | So every record can be explained and checked | While your account exists |
| Raw voice audio | Only when needed to process a recording | At most 30 days, unless you opt in to AI improvement |
| Your customers' names, phone numbers and debts | You keep these records; we process them on your behalf | Until you delete them or your account |
| Product analytics | To improve Shiro, never includes amounts, names or what you said | 13 months, pseudonymised |
We do not collect gender, and we do not ask for your date of birth.
Legal basis
We process your data to provide the service you signed up for (contract), to keep it secure and meet legal duties, and, only where you agree, to improve Shiro's understanding of market language (consent, which you can withdraw in Profile → Privacy).
AI processing and transfers
Shiro's built-in engine runs on our servers. To understand unusual sentences and answer questions, Shiro uses Anthropic's Claude AI; for its voice and listening it uses Spitch, a speech service built for African languages. Only the minimum needed is sent, never your phone numbers. Anthropic does not train its models on data sent through its API, and we set every provider not to keep or train on your data wherever they allow it. If providers or hosting are outside Nigeria, your data is transferred abroad on a documented legal basis.
Your customers' data
When you record your customers, you are responsible for using their details lawfully. Reminders are only sent after you approve each one, are rate-limited, and customers can reply STOP to opt out for good.
Your rights
- See and download your data (Profile → Your data)
- Correct your details
- Delete your account (Profile → Delete account), with a 30-day recovery window
- Object to or withdraw consent for AI learning
- Complain to the Nigeria Data Protection Commission
Security and breaches
See Security. If a qualifying breach happens we will notify the NDPC within 72 hours and affected users where required.
Contact
Our Data Protection Officer can be reached by email at bobadoyed@shiroafrica.com, by phone on +234 812 056 1552, or through the contact page.
This notice is a draft for review by Nigerian legal counsel before launch.