Privacy Policy

Version 1.0 — Last updated August 2026 — Lagos, Nigeria

ADAVEL Fund is committed to protecting your personal information. This policy explains what we collect, why, and how we use it. Prepared in compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act 2023.

1. Who We Are

ADAVEL Fund operates the platform at adavelfund.com. We are the data controller for personal information collected through the Platform. This policy applies to all Users — Founders and visitors.

2. What Data We Collect

2.1 Data You Provide

Identity data: full name, date of birth (where provided)
Contact data: email, phone, LinkedIn URL
Business data: company name, registration number, industry, revenue figures, projections
Application data: all six sections of the application form
Financial data: bank statements, financial models, monthly KPI submissions
Document data: pitch decks, CVs, CAC certificates, uploaded files
Communication data: messages sent via the Platform

2.2 Data Collected Automatically

Technical data: IP address, browser type, device, OS
Usage data: pages visited, time spent, features used
Session cookies: required for Platform functionality

3. Why We Collect This Data

To operate the Platform: account creation, authentication, access management.

To process applications: assessment, scoring, and investment decisions — necessary for the performance of a potential contract.

To manage investments: monthly KPI data, revenue tracking, RBF repayment obligations, portfolio reporting.

To communicate: notifications, status updates, reminders, portfolio digests. No unrelated marketing.

Legal obligations: compliance with Nigerian law, financial reporting, anti-fraud requirements.

4. Who We Share Your Data With

We do not sell your personal data.

Service providers: Supabase (database/storage), Resend (email), Paystack (payments). All bound by data processing agreements.

Legal requirements: Regulatory authorities or courts where required by law.

5. Data Retention

Application data: duration of process + 3 years
Portfolio Company data: duration of investment + 7 years
Unsuccessful applicant data: 2 years from rejection
Technical/usage data: 12 months, then anonymised

6. Data Security

Row Level Security on all database tables
HTTPS encrypted transmission
Bank statements restricted to Admin role only
Secure cloud storage with access logging
Regular security reviews

No system is 100% secure. Report vulnerabilities to management@adavelfund.com.

7. Your Rights Under the NDPR

Right of access — request a copy of your data
Right to rectification — correct inaccurate data
Right to erasure — request deletion (subject to retention obligations)
Right to restriction — limit processing in certain circumstances
Right to portability — receive your data in a machine-readable format
Right to object — object to processing based on legitimate interests

Contact management@adavelfund.com. Response within 30 days.

8. Cookies

Session cookies only, strictly necessary for authentication and functionality. No advertising or tracking cookies. You can disable cookies in your browser, but some features may not work.

9. Changes & Complaints

Material changes notified by email 14 days before taking effect. Complaints may be lodged with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

10. Contact

ADAVEL Fund · management@adavelfund.com · adavelfund.com · Lagos, Nigeria