Privacy Policy

1. Scope and applicable privacy law

This Privacy Policy applies to Beaverly websites, applications, Chilla, M-II, Chilla Demo, support, and related services (collectively, the “Services”). The Services include hosted software automation that may run on infrastructure operated by Beaverly or its technology providers rather than on your personal device.

Beaverly is based in Nigeria. Our privacy practices are governed by applicable law, including the Nigeria Data Protection Act 2023 and, where they apply to a particular user or processing activity, other privacy laws such as the GDPR or applicable California privacy law.

2. Information we collect

Account and profile information

• Name, email address, authentication identifiers, and account settings.
• Subscription tier, billing status, and payment metadata supplied by payment providers. Beaverly does not need your full payment-card details to provide the Services.

Conversation and product information

• Messages you send to Chilla, conversation history, replies, goals or intent you provide, and product choices you make.
• Task and PLAN information, settings, approval and activation records, report-back references, support interactions, and other product state needed to provide the Services.

Connected-account information

• Account-provider identifiers, account metadata, connection status, and provider-authorized tokens or session information where needed for connected-account functionality.
• Financial-account information made available through the provider connection, such as balances, activity, or other data required to operate and report on authorized work.

Device, security, and usage information

• IP address, browser and device information, approximate location derived from network information, referral information, session identifiers, and security events.
• Product interactions, feature usage, performance data, diagnostics, error events, and analytics.

3. Provider assistance and sensitive steps

For supported provider journeys, Chilla may help you navigate provider setup or account-management pages. Ordinary page information needed to provide that assistance may be processed as part of the feature.

Sensitive and consequential steps remain user-controlled. When you take over a supported sensitive credential step, Chilla does not observe the credential-entry activity. Chilla does not store plaintext broker passwords.

Where product policy allows a provider session to be retained so supported assistance can continue later, that session is protected with encryption at rest and in transit and kept isolated. Provider-session information is handled as sensitive connected-account data.

You should not paste passwords, OTP/MFA codes, recovery codes, private keys, or other provider authentication secrets into a Chilla conversation or ordinary support message.

4. How we use personal data

We use personal data to:

• create and secure your Beaverly account;
• provide Chilla conversations, continuity, product context, choices, task and PLAN information, approval and activation records, connected-account functionality, supported provider assistance, Report Back, and related features;
• authenticate and maintain provider-authorized connections;
• process subscriptions, billing, refunds, and account entitlements;
• detect abuse, investigate incidents, protect accounts, and maintain system integrity;
• monitor reliability, diagnose failures, measure product usage, and improve the Services;
• provide support and communicate product, billing, operational, legal, or security notices;
• comply with legal obligations and enforce our Terms.

5. Legal bases for processing

Depending on the data and context, we process personal data because it is necessary to perform our contract with you, because we have legitimate interests in operating and protecting the Services, because you have given consent where consent is required, or because processing is necessary to comply with legal obligations or protect legal rights.

Where applicable law gives you a right to withdraw consent, withdrawal does not affect processing that was lawful before withdrawal.

6. When we share data

We do not sell your personal information. We may share limited personal data with service providers or other parties when needed to provide or protect the Services, including:

• technology providers used to host, secure, operate, monitor, analyze, or communicate the Services;
• payment processors and billing providers;
• AI or model service providers used to process Chilla conversations and related product requests;
• the account provider you choose to connect, where information must be exchanged to provide authorized connectivity or account functionality;
• professional advisers, auditors, insurers, or corporate transaction participants where reasonably necessary;
• government bodies, regulators, courts, or other parties where disclosure is required by law or necessary to protect legal rights, safety, or security.

We may also use or disclose aggregated or de-identified information that does not reasonably identify you.

7. International data transfers

Some service providers or systems used by Beaverly may operate outside Nigeria. As a result, personal data may be processed in countries with different data-protection rules. Where required, Beaverly uses appropriate contractual, organizational, or legal measures for cross-border processing.

8. Data retention

We retain personal data for as long as reasonably necessary to provide the Services, maintain security and auditability, resolve disputes, meet legal or accounting requirements, and enforce agreements.

Different categories may have different retention periods. Some records may need to be preserved after account deletion where required for legal, security, fraud-prevention, billing, financial-activity audit, or dispute purposes.

9. Data security

Beaverly uses administrative, technical, and organizational safeguards intended to protect personal data, including access controls, secure authentication, encrypted transport where appropriate, monitoring, and restricted handling of sensitive credentials and provider-session information.

No online service can guarantee absolute security. If you believe your Beaverly account or connected-account access has been compromised, contact us promptly.

10. Your privacy rights

Depending on the law that applies to you, you may have rights to access, correct, delete, restrict, object to certain processing, withdraw consent, or receive a portable copy of personal data. Some rights are subject to exceptions or identity verification.

To make a privacy request, email privacy@beaverlyai.com. We may ask for information needed to verify that the request relates to you.

11. Cookies, local storage, and analytics

Beaverly may use cookies, browser storage, analytics tools, and similar technologies to keep sessions working, remember settings, protect the Services, understand product usage, and measure website performance.

Our public website uses Google Analytics. Browser settings and available consent controls may allow you to limit or remove certain cookies or stored data, although some product functions may depend on them.

12. Children’s privacy

The Services are not intended for people under 18, and Beaverly does not knowingly provide financial-work features to children. If we learn that we collected personal data from a child in circumstances where we should not have done so, we will take appropriate steps to delete or restrict it.

13. Changes to this policy

We may update this Privacy Policy as the Services, service providers, or legal requirements change. We will update the date above and may provide additional notice when a change is material.

14. Contact and complaints