Privacy Policy

1. Who we are

Sygnite Power and Energy Solutions Ltd ("Sygnite", "we", "us") is a company registered in Nigeria with offices at:

• Lagos: No. 5 C & I Leasing Drive, Lekki Phase 1
• Abuja: 6 Jobson Ewalefoh Street, Jahi Gilmore

We can be reached at info@sygniteng.com or +234 808 307 3047. We act as the data controller for the personal information described in this policy.

2. Scope

This policy covers personal data we collect when you:

• Visit our website at sygniteng.com
• Become a Sygnite customer and use the Customer Portal
• Contact us via chat on our website, by email, or through WhatsApp, Instagram, or Facebook Messenger
• Raise a maintenance request or interact with our support team

3. Information we collect

3.1 Information you give us directly

• Contact details, name, email, phone number, address, contact person
• Account information, credentials for the Customer Portal, password (hashed, never stored in plain text)
• Billing information, system size, package selected, payment method, transaction history. Payment card details are processed exclusively by Paystack and never stored on our servers
• Tax identification, your TIN where applicable for VAT compliance
• Documents, signed contracts, identification documents, system photos you upload to your account
• Communications, messages you send us through chat, WhatsApp, Instagram, email, or phone, including audio messages and attachments

3.2 Information collected automatically

• System telemetry, when you have a Sygnite-installed solar system, we collect energy generation and consumption data from the monitoring hardware to bill PAYG plans accurately and detect faults
• Usage data, pages visited in the Customer Portal, features used, audit log of actions you take on your account
• Technical data, IP address, browser type, device type, referring URL when you access our digital services

3.3 Information from chat messages

When you message us through WhatsApp, Instagram, Facebook Messenger, or our website chat widget, we receive and store:

• Your message content (text, images, audio, documents you attach)
• Your profile name and phone number / username as provided by the messaging platform
• The webpage you were on when starting a website chat session

AI-assisted reply features may forward your message text to Anthropic (Claude) or OpenAI for the limited purpose of generating a customer-support response. Anthropic and OpenAI process this data under their own privacy policies. We do not use your messages to train AI models.

4. How we use your information

We process your personal data to:

• Provide, install, monitor, and bill for solar energy systems and services
• Communicate with you about your account, invoices, maintenance, and our services
• Provide customer support and respond to your questions across all channels
• Process payments and manage refunds, wallets, and instalments
• Detect and prevent fraud, abuse, and system faults
• Comply with Nigerian tax law, electricity regulations, and other legal obligations
• Send you marketing about Sygnite products and services where you have opted in

Under the NDPR and NDPA, our lawful bases for processing are: (a) performance of our contract with you; (b) compliance with legal obligations; (c) our legitimate interest in running and improving our business; and (d) your consent, where required (such as for marketing communications).

5. Sharing your information

We do not sell your personal information. We share it only with:

• Service providers who help us operate, including Supabase (database and file storage), Resend (transactional email), Paystack (payment processing), Anthropic and OpenAI (AI features), DeyeCloud (solar monitoring), and Meta (WhatsApp / Instagram messaging)
• Regulators and authorities when required by Nigerian law or a valid court order
• Professional advisors such as our accountants and legal counsel, under confidentiality obligations
• A successor entity if Sygnite is restructured, sold, or merged, your data continues to be governed by this policy

Some of these providers process data outside Nigeria. We use providers with industry-standard safeguards (encryption in transit and at rest, role-based access). Where required by the NDPR/NDPA we ensure adequate contractual protections are in place for cross-border transfers.

6. How long we keep your information

• Account and billing records, for the duration of your relationship with us plus 7 years thereafter, in line with Nigerian tax retention requirements
• Chat conversations and support tickets, for 3 years after the last interaction, then archived or deleted
• System monitoring data, for the lifetime of your installed system; aggregated, non-identifying telemetry may be retained longer for product analytics
• Marketing data, until you unsubscribe or withdraw consent

7. Your rights

Under the NDPR and NDPA you have the right to:

• Request a copy of the personal data we hold about you (access)
• Correct inaccurate or incomplete data (rectification)
• Request deletion of your data, subject to legal retention obligations (erasure)
• Object to certain processing, including direct marketing
• Request restriction of processing while a dispute is resolved
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time where consent was the lawful basis
• Lodge a complaint with the Nigeria Data Protection Commission (nitda.gov.ng)

To exercise any right, email info@sygniteng.com with the subject line "Data Rights Request". We respond within 30 days.

8. Security

We use industry-standard technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, role-based access control on internal systems, hashed passwords, signed webhook deliveries, and regular reviews of access by our staff. No system is fully impenetrable; we will notify you and the relevant authorities of any security incident affecting your personal data as required by law.

9. Children

Sygnite's services are intended for businesses and adults aged 18 or older. We do not knowingly collect information from children. If you believe a child has provided us personal data, contact us and we will delete it.

10. Cookies and similar technologies

Our website uses essential cookies to keep you signed in and to remember your preferences. We do not use advertising or cross-site tracking cookies. The Customer Portal sets a small number of strictly necessary session cookies that are required for sign-in and to keep you securely logged in. Disabling them will prevent sign-in.

11. Changes to this policy

We may update this policy from time to time. When we do, we update the "Last updated" date at the top of the page. Material changes will also be communicated by email or an in-portal notice.

12. Contact us

For questions about this policy or how we handle your data, contact our Data Protection point of contact:

Sygnite Power and Energy Solutions Ltd
info@sygniteng.com
+234 808 307 3047