Privacy Policy

Who we are

Routely is run by Focuslinks Digital Solutions ("we"), based in Lekki, Lagos, Nigeria. This page says what we keep about you and your customers, why, and for how long. We follow the Nigeria Data Protection Act 2023.

What we keep

• Your account: your email address, the date you accepted the terms, and your plan and its end date.
• Your sites: the domain of each PHPNuxBill site you connect and the address we send events to. The keys that let a site talk to us are stored hashed or encrypted.
• Your messages: for every message PHPNuxBill sends through us, the phone number, the text, the time, the gateway used and whether it was sent or failed. We keep this for 90 days, then delete it. A message that is still waiting is kept until it is sent or fails.
• Your gateways: the name, limits and settings you choose, and the provider keys or passwords you enter. Keys are encrypted and are never shown back to you or to anyone else.
• Payments: the payment reference, amount, plan and months. Paystack takes your card or bank details; we never receive them.
• Security records: the network address and time of sign-in attempts, kept for 24 hours to stop abuse.
• Email: we send you sign-in codes and plan reminders.

Your customers' phone numbers

The phone numbers and texts in your messages belong to you and your customers. We handle them only to send them for you, so for that data you decide the purpose and we act on your instructions. You are responsible for having the right to message those numbers. We do not read them for any other purpose, use them for marketing, or sell them.

Who else sees it

• The SMS gateway you choose. A message, its number and its text go to the provider you set up (for example Termii, Africa's Talking or Twilio) so it can send it. Their own privacy terms apply to what they hold.
• Paystack, for payments.
• Our email and hosting providers, who carry the emails we send and run our servers.
• Anyone the law requires us to tell, such as a court or regulator.

We do not sell personal data.

Why we keep it

To run the service you asked for: send your messages, bill you, keep your account safe, and tell you when your plan is ending. We keep the 90-day message history so you can see what was sent and why a message failed.

Your choices

• You can ask for a copy of your data, a correction, or deletion of your account and its data. Write to us at the address below. Deleting an account removes its sites, gateways, messages and keys; we keep payment records for as long as tax and accounting law requires.
• Disconnecting a site in the plugin stops that site's keys working at once.
• You can complain to the Nigeria Data Protection Commission if you think we handled your data wrongly.

Security

Connections use HTTPS. Requests from your site are signed. Provider keys are encrypted. Sign-in uses a one-time code and is rate limited. No system is perfectly safe; if something affecting you goes wrong we will tell you.

Changes

If this page changes in a way that matters, we will email you before it applies.