Conceivr is a platform that connects African founders and entrepreneurs with vetted expert advisors for paid 1:1 advisory sessions, webinars, and mentorship. Conceivr is operated by Conceivr Limited, a company incorporated in Nigeria under the Companies and Allied Matters Act 2020 (RC Number: 9486345).

Registered address: No. 22 Otunba Alaba Williams Street, Alimosho, Lagos, Nigeria

Data controller contact: youreach@conceivr.com

Supervisory authority: Nigeria Data Protection Commission (NDPC) — ndpc.gov.ng

Account information

When you create an account, we collect your name, email address, and profile photo through our sign-in system. If you sign up with Google or another OAuth provider, we receive the data shared by that provider.

Profile data

Information you add to your Conceivr profile: your bio, sector, stage, country, LinkedIn URL, and any other details you choose to provide. For experts: your tagline, specialties, pricing, availability, and bank account details for payouts.

Session and booking data

Details of sessions you book or host: scheduled time, duration, session notes, and ratings submitted after sessions. We do not record video sessions by default.

Webinar audio (AI transcription)

When a webinar host enables live transcription, audio captured from the host's microphone is sent in short segments to our AI transcription provider for processing. Audio segments are processed in real time and not stored by the provider or Conceivr beyond what is needed to generate the transcript. The resulting transcript text may be stored as part of the webinar session record. Transcription is optional and can be stopped at any time by the host.

Payment data

Transaction records including amounts, dates, and statuses. We do not store your card number, CVV, or bank account number — these are handled directly by Flutterwave, our licensed payment processor. We store payment reference IDs for reconciliation.

Usage data

Standard server logs: IP address, browser type, pages visited, and timestamps. This data is used for security and platform improvement.

Communications

Messages you send through the Conceivr messaging system and any communications you have with our support team.

Under the NDPA 2023, we must have a lawful basis for processing your personal data. The bases we rely on are:

• Contract: processing your account data, booking data, and payment references is necessary to deliver the services you signed up for
• Legal obligation: retaining payment and transaction records for the period required by Nigerian tax and financial regulations
• Legitimate interests: server logs and security monitoring to protect the platform and its users from fraud and abuse
• Consent: AI transcription — enabled only when the host explicitly activates it; you may withdraw consent at any time by turning off transcription

We do not sell your personal data to third parties. We do not use your data for advertising purposes or share it with ad networks.

• To operate the platform: matching founders with experts, processing bookings, scheduling sessions, and managing your account
• To process payments: initiating and tracking payments through Flutterwave, managing escrow, and processing expert payouts
• To communicate with you: sending booking confirmations, session reminders, application updates, and support responses
• For video sessions: creating and managing secure video rooms for booked sessions
• For trust and safety: detecting fraud, preventing abuse, and enforcing our Terms of Service
• To improve the platform: analyzing usage patterns (aggregated and anonymized) to make Conceivr better

We work with third-party service providers to operate Conceivr. These providers process personal data only as necessary to deliver their services to us, and are bound by data processing agreements. Our sub-processors are:

For a full list of sub-processors including company names and data locations, contact us at youreach@conceivr.com.

Some of our sub-processors are located outside Nigeria. Where personal data is transferred outside Nigeria, we ensure appropriate safeguards are in place, including contractual clauses that meet the requirements of the NDPA 2023 and NDPC guidance. By using Conceivr, you acknowledge that your data may be processed in other countries as part of delivering our services.

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law:

• Account profile data: retained while your account is active. Deleted within 30 days of account deletion request.
• Payment and transaction records: retained for 7 years from the transaction date, as required by Nigerian tax law, FIRS regulations, and CBN guidelines.
• Booking history and session records: retained for 2 years after the session date to support dispute resolution and payout reconciliation.
• Server logs and traffic data: retained for 2 years as required under Section 38 of the Cybercrime (Prohibition, Prevention, etc.) Act 2015. These may be disclosed to law enforcement on lawful request.
• Guest (non-account) email addresses: anonymised after 90 days from the date of the relevant booking or registration.
• Expert payout verification records (BVN last 4 digits): retained for 5 years as required under the Money Laundering (Prevention and Prohibition) Act 2022.
• Terms acceptance records: retained for the life of the account plus 7 years, as evidence of contractual consent.

After retention periods expire, data is securely deleted or anonymised. You may request early deletion of your personal data under Section 8 below, subject to mandatory retention requirements above.

Under the Nigeria Data Protection Act 2023, you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your personal data (subject to legal retention requirements)
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing of your data based on legitimate interests
• Withdraw consent: where processing is based on consent (e.g. AI transcription), you may withdraw it at any time without affecting prior processing
• Restriction: request that we restrict processing of your data in certain circumstances

To exercise any of these rights, contact us at youreach@conceivr.com. We will respond within 1 month as required by the NDPA 2023.

If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

Conceivr uses cookies and local browser storage for authentication and to store your session preferences on the platform (e.g., sidebar state, filter settings). We do not use advertising cookies or third-party tracking pixels. See our Cookie Policy for full details.

You can clear cookies and site data through your browser settings. This will sign you out of Conceivr.

We use industry-standard security practices: HTTPS for all data in transit, encrypted storage with row-level access controls on all database tables, and server-side authentication on all API routes. Payments are fully delegated to Flutterwave — Conceivr never handles raw card or bank account data.

Despite these measures, no system is 100% secure. If you believe your account has been compromised, contact youreach@conceivr.com immediately.

Data breach notification: In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of the breach, as required by Section 40 of the NDPA 2023. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay, describing the nature of the breach, the likely consequences, and the steps we are taking to address it.

Conceivr is not intended for users under 18. We do not knowingly collect personal data from minors. If we learn that a user is under 18, we will delete their account and data promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting a notice on the platform at least 7 days before the changes take effect. Continued use of Conceivr after that point means you accept the updated policy.

Data Protection Officer (DPO): Conceivr has designated a Data Protection Officer responsible for overseeing compliance with the NDPA 2023. You can reach our DPO at privacy@conceivr.com.

For general data protection questions, contact youreach@conceivr.com.

Marketing opt-out: If you receive non-transactional emails from Conceivr and wish to stop, click the unsubscribe link in any such email or email privacy@conceivr.com. You will continue to receive transactional emails (booking confirmations, payment receipts, security alerts) as these are necessary to deliver your contracted services.

If you are unhappy with how we have handled your personal data, you may escalate your complaint to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.