Cobbo
Start a project

1. General

In this Policy, "we", "us" and "Cobbo" mean Cobbo Nigeria Ltd. The "Website" means our public website, and the "Invoice Creator" or "Services" means Cobbo Invoicing, our invoicing and business management software, together with any related services we provide.

Your use of the Website and the Invoice Creator and any dispute over privacy is subject to this Policy and our Terms and Conditions, including their applicable limitations on damages and the resolution of disputes. By visiting our Website and using the Invoice Creator you are accepting and consenting to the practices described in this Policy.

2. What Does This Privacy Policy Cover?

This Privacy Policy covers our collection, use and disclosure of information about identifiable individuals ("Personal Information"). It applies to visitors to the Website, people who create an account and use the Services, team members invited to an account, the customers of our account holders, and clients who pay us through a Cobbo payment link.

This Privacy Policy covers the activities of Cobbo Nigeria Ltd. only and does not apply to the practices of companies we do not own or control, including the websites we design and build for our clients.

Account holders and their customers. When you, as an account holder, add your own customers and their details to create and share invoices, you are the controller of that customer information and Cobbo Nigeria Ltd. acts as a processor handling it on your behalf and on your instructions. You are responsible for having a lawful basis to provide that information to us.

3. Information We Collect & How We Use It

When you register for and use the Services, Cobbo Nigeria Ltd. collects the following Personal Information:

  1. Account details — your email address and password (stored in hashed form). If you sign in with Google, we receive your Google email address and a unique Google account identifier; we never receive your Google password. We also keep your referral code, who referred you (if anyone), and your invoice credit balance.
  2. Business details — your business name, email, phone, address, website, category, registration number (CAC), brand colour, and the logo and signature images you upload.
  3. Financial details — bank account information you add to appear on your invoices (account name, account number and bank name), with the account name and number stored in encrypted form; and records of your subscription payments, such as the transaction reference, amount, status and the payment authorisation returned by our payment provider, which we also store in encrypted form. We do not receive or store full card numbers; card payments are handled by our payment providers.
  4. Customer information — the details you enter about your own customers to create invoices, such as their name, email, phone, address and notes.
  5. Team information — the email addresses of people you invite to your business, their role (owner, member or viewer) and the status of each invitation.
  6. Invoices, tasks and ledger records — the invoices, line items, payment status and amounts paid, ledger entries and tasks you create within the Services.
  7. Usage and device data — your IP address and browser/user-agent while you are signed in, the time and IP address of your last login, and an activity log of key actions (such as creating, editing or deleting records), which records the action, the page address, your IP address and browser. We keep this for security and audit purposes.
  8. Payment link payers — if you pay Cobbo for a service through a payment link we send you, we receive your name, email address, the amount and the payment record from our payment provider. You do not need an account to pay.
  9. Website visitors — the Website has no sign-up or contact forms and uses no analytics or advertising tools. If you email us or start a WhatsApp chat with us, we receive whatever you choose to send.

We use Personal Information to:

  • Authenticate access to the Account and provide access to the Services.
  • Provide, operate, maintain and improve the Services.
  • Create, display and share the invoices you make, and keep your ledger, tasks and customer records.
  • Process subscription and payment link payments, and manage your plan, invoice allowance and credits, including referral credits.
  • Send account and security emails, team invitations, and subscription renewal and expiry notices.
  • Send newsletters and product updates, which you can unsubscribe from at any time.
  • Investigate and prevent fraudulent transactions, abuse and unauthorized access.
  • Monitor usage and activity in connection with the Services to keep them secure and reliable.
  • Enable you to work together with the team members you invite.

4. Disclosure of Personal Information With Third Parties

We do not sell your Personal Information.

Service Providers. We rely on a small number of trusted third parties to operate the Website and the Services, and we share only the Personal Information each one needs to perform its function. These providers are not permitted to use your information for any purpose beyond providing their service to us. They currently include:

  1. Paystack — processes subscription payments, automatic renewals and payment link payments; receives your email address, the payment amount and transaction details.
  2. Stripe — processes card payments made through a Cobbo payment link; receives the payer's name, email address, the amount and transaction details.
  3. Cloudinary — stores and serves the images you upload, such as your business logo and signature, and the client logos shown on our Website.
  4. Google — provides "Sign in with Google" if you choose to use it. Our Website and the Services also load fonts from Google Fonts, which means Google receives your IP address and browser information when a page loads.
  5. Email/SMTP provider — delivers our emails, such as email verification, password resets, team invitations, subscription notices and newsletters.

Invoices you share. When you share an invoice, you choose how it is sent. A shared invoice link lets anyone who has it open that invoice as a PDF until the link expires 60 days after it is created. If you share through WhatsApp, the message is sent from your own device and is subject to WhatsApp's own terms and privacy policy. The same applies when a visitor uses the WhatsApp chat button on our Website.

Business Transfers. If our business is acquired by a third party, or if we go out of business, enter bankruptcy, or go through some other change of control, Personal Information may be made available to the new controlling entity, where permitted under applicable law.

As Required by Law. We may disclose your Personal Information to third parties without your consent if we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be causing injury to our rights or property, or as required by applicable law, regulation, or legal process.

5. Retention & Deletion

We will keep your Personal Information for as long as your account is active, for as long as it remains necessary for the identified purpose, or as required by law.

You can ask us to delete your account at any time by contacting us using the details in the "Contact Us" section below. When an account or record is deleted, it is marked as deleted and removed from everyday use of the Services. Because we use soft-deletion, some records may be retained in our systems for a period after deletion, and we may retain certain information for longer where necessary to comply with legal obligations (for example, payment and tax records), resolve disputes, prevent fraud or abuse, or for legitimate business purposes. All retained Personal Information remains subject to this Privacy Policy. If you would like your retained data permanently erased, you can ask us to do so, subject to those obligations.

6. Access, Correction & Accuracy Rights

You have the right to access the Personal Information we hold about you in order to verify what we have collected and our uses of that information. Upon receipt of your written request, we will provide you with a copy of your Personal Information, subject to applicable limitations.

You can update most of your information yourself in the Services, including your email address, password, business details, bank details, customers and invoices. For anything you cannot change yourself, contact us and we will make every reasonable effort to keep your Personal Information accurate and up to date.

7. Where We Store Your Data

All information you provide to us is stored on our secure servers, and we keep regular backups to protect against data loss. We use industry-standard safeguards to protect your data: information is transmitted over encrypted SSL/TLS connections, your bank account name and number and the payment authorisations returned by our payment provider are encrypted at rest, passwords are stored in hashed form, and we support two-factor authentication for added account security. Unfortunately, the transmission of information via the internet is not completely secure; although we will do our best to protect your personal data, we cannot guarantee the security of data transmitted to our Website, and any transmission is at your own risk.

8. Our Use of Cookies & Tracking Mechanisms

We only use cookies that are necessary to operate the Website and the Invoice Creator securely. We do not use analytics, advertising or cross-site tracking cookies. The cookies we set are:

  1. Session cookie — keeps you signed in and maintains your session as you move through the Website and the Services. If you arrive through a referral link, the referral code is held in your session until you register.
  2. "Remember me" cookie — keeps you signed in between visits if you choose that option.
  3. Security cookie — protects against cross-site request forgery (CSRF) and other abuse.

Most web browsers automatically accept cookies. You can edit your browser options to block them; however, signing in and most features of the Services will not function if you disable these strictly necessary cookies.

9. Emails & Communication Preferences

We send two kinds of email. Service and security emails — such as email verification, password resets, team invitations, and subscription renewal and expiry notices — are necessary to provide the Services and cannot be opted out of while you have an account.

Newsletters and marketing emails — such as product news and updates — are optional. Every newsletter includes a one-click unsubscribe link, and you can also opt out by contacting us. Once you unsubscribe, we stop sending you these emails, and you can resubscribe at any time.

10. Your Rights Under the Nigeria Data Protection Act

We process Personal Information in accordance with the Nigeria Data Protection Act, 2023 (NDPA) and the framework administered by the Nigeria Data Protection Commission (NDPC). Depending on the circumstances, our legal basis for processing your information includes your consent, the performance of our contract with you (providing the Services), compliance with our legal obligations, and our legitimate interests in operating and securing the Services.

Subject to applicable law, you have the right to:

  1. Access the Personal Information we hold about you.
  2. Rectify information that is inaccurate or incomplete.
  3. Erase your Personal Information ("right to be forgotten"), subject to our legal and legitimate retention needs.
  4. Restrict or object to certain processing, including direct marketing.
  5. Data portability — receive a copy of information you provided in a usable format.
  6. Withdraw consent at any time where processing is based on consent, without affecting processing already carried out.

To exercise any of these rights, contact us using the details in the "Contact Us" section below. You also have the right to lodge a complaint with the Nigeria Data Protection Commission.

11. Changes To Our Privacy Policy

This Policy may change from time to time. Any changes in the future will be posted on this page with a new "last updated" date and, where appropriate, notified to you by email. Continued use of the Invoice Creator will constitute acceptance of the Policy in place from time to time.

12. Contact Us

If you would like to update your information, delete your account, exercise any of your data-protection rights, or contact us about a privacy-related matter, please reach out to us at support@cobbo.net.

Chat with us