Privacy Policy

Last updated 7 August 2026

This policy describes what we actually do, in plain language. It hasn't yet been reviewed by a lawyer — if you have questions about a specific legal point, ask us directly at followpoint3@gmail.com.

Who we are

Followpoint is a WhatsApp lead-capture and booking service for small businesses, built and operated by Webrandova, based in Lagos, Nigeria. This policy covers the followpoint.site website and the Followpoint service itself.

The Nigeria Data Protection Act 2023

We're aware of the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Commission (NDPC) that enforces it, and we handle personal data with that in mind: we collect only what the service needs, we tell you what we collect and why on this page, and you can ask us to access, correct, or delete your data at any time (see "Your rights" below).

What data we collect

We collect a few different kinds of data:

From businesses that sign up for Followpoint: business name, your name, phone number, email address, and (if you give it to us) a business address, business type, and operating hours.
To connect your WhatsApp number: your WhatsApp Business Account ID (WABA ID), phone number ID, and Meta Business ID, plus the business access token Meta issues once you connect — this token is what lets us send and receive messages on your behalf through Meta's Cloud API. It's stored separately from the rest of your account data, is never shown in your dashboard, and is used only for that purpose.
From your customers, once your WhatsApp number is connected: their phone number, name (if WhatsApp shares it), and the content of the messages they send — this is what powers lead capture, tagging, and your dashboard.
From visitors to this website: whatever you submit through our contact form or a demo request (name, business name, phone number, and your message).
Payments: we never see or store your card details. Payments are handled directly by Paystack, and we only keep the transaction reference, amount, and date.

How we store and secure it

Data is stored with Convex, our backend provider, which encrypts data in transit and at rest and takes automatic backups — we don't run our own servers or databases. WhatsApp business access tokens are kept in a separate, more restricted part of our database than the rest of your account data, and are never returned to your own dashboard session. Messages are sent and received through Meta's official WhatsApp Business Platform, as a Meta Tech Provider — Meta requires this access token to be refreshed periodically, which we do automatically. The website itself is hosted on Vercel. We don't sell your data to anyone, and we only share it with these processors (Convex, Meta, Paystack, Vercel) because the service can't work without them.

How long we keep it

We keep your account and customer data for as long as your Followpoint service is active, plus a reasonable period after cancellation in case you want to reactivate or need a copy of your data. Payment records are kept as long as Nigerian tax and accounting rules require. You can ask us to delete your data sooner at any time — see "Your rights" below, or the separate Data Deletion Instructions page.

If your customers are outside Nigeria

Followpoint is built for Nigerian small businesses and NDPA is our primary framework, but if some of your customers happen to be in the EU or elsewhere, we apply the same principles regardless of where they're based: we collect only what the service needs, we're transparent about what we hold, and we honor access/correction/deletion requests the same way.

How we use it

For businesses using Followpoint, your customers' data is used to run your dashboard — capturing leads, tagging them Hot / Warm / Cold, showing your message history, and (on some plans) alerting you to hot leads and putting together your weekly report. For website visitors, contact and demo request data is used only to get back to you about Followpoint.

Your rights

You can ask us what data we hold about you, ask us to correct it, or ask us to delete it — email followpoint3@gmail.com and we'll sort it out. If you're a business client's customer and want your data removed from their Followpoint dashboard, you're welcome to contact us directly, or ask that business to do so on your behalf.

Questions

Reach us at followpoint3@gmail.com — we're a small team and read every message ourselves.