Privacy

How Stall Bill handles personal data, under the Nigeria Data Protection Act 2023. Last updated October 2026.

What we keep

Traders: your phone number, a scrambled copy of your PIN (we can't read it), your business name, bank details, TIN and logo if you add them, and the invoices and payments you record.

Your customers: the names, WhatsApp numbers and TINs you enter, and what they bought from you. You are responsible for having a good reason to keep your customers' details, the same as in a paper ledger.

Buyers who open an invoice link: if they tap "I've paid", the amount and note they type and their IP address. Opening a link sets one cookie holding a random number, so we can count how many different people open invoices. It holds nothing about who they are.

Security records: failed sign-in attempts (phone number, IP address, time) and a log of every change our staff make to bank details, PINs and plans (old and new value, who, when, from which IP).

Why

To run the service you signed up for: showing invoices to the people they were sent to, tracking who owes you, and taking payment for the paid plan. Security records exist to stop account takeover and payment fraud. We don't sell data, show ads or send marketing to your customers.

Who else handles it

Our hosting and database provider, file storage for logos, an error-reporting service (which receives technical details of crashes with personal data removed), and Telegram or email for alerts to our own staff. Each only gets what it needs to do that job.

How long we keep it

• Account, invoice and payment data: while your account is open. When you close it, we delete it within 30 days, except records the law requires us to keep for tax or disputes.
• Security records: while the account is open and up to 12 months after, to investigate fraud.
• Backups: overwritten after 7 days.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it. Your customers can ask us too, and we'll involve you. Message our support WhatsApp number (09061627366). We reply within 7 days. If you're not happy with our answer, you can complain to the Nigeria Data Protection Commission.

Keeping it safe

Invoice links are long and random, hidden from search engines, and only open for people who have the link. Staff access needs a password and a one-time code. Bank detail changes need a phone call to your registered number, and you get a WhatsApp message each time one happens.