Data, Privacy & Security

How BrandDrive protects your data

Data Protection & Privacy

Every business using BrandDrive handles important information daily: customer records, payment activity, inventory data, staff access, financial reports, and operational history. Keeping that information protected is part of running a reliable business system.
BrandDrive is designed to help businesses manage their operations securely while giving account owners visibility and control over how business data is accessed across the platform.
In this section, you’ll learn how to:

– Understand the information stored on BrandDrive

– Manage your account security settings

– Enable Two-Factor Authentication (2FA)

– Monitor active login sessions

– Understand your data rights and privacy controls

How BrandDrive Handles Your Data

BrandDrive stores and processes business information required to operate the platform effectively. This includes operational records such as inventory updates, invoices, sales activity, customer records, payment history, bookkeeping data, and staff access logs.
To protect this information, BrandDrive applies account-level permissions, encrypted authentication, login monitoring, and internal access controls across the platform.
Information is collected only where necessary for platform functionality, account verification, financial processing, customer support, compliance requirements, and improving system performance.

Information Stored on BrandDrive

When setting up and using your BrandDrive account, certain information is required for identification, verification, and operational use.
This may include:

– Business name and business address

– Phone numbers and email addresses

– Staff and user account details

– Customer records added by your business

– Transaction and payment history

– Inventory and bookkeeping records

– Device and login activity

BrandDrive may also collect technical information such as browser type, IP address, login timestamps, and device details to improve platform security and monitor account activity.

Business and Customer Responsibilities

If your business stores customer information in BrandDrive, you are responsible for ensuring that the information was collected appropriately and, where required, with the necessary consent.
This applies to records such as:

– Customer phone numbers

– Email addresses

– Delivery information

– Transaction history

– Loyalty and reward records

BrandDrive does not require businesses to upload sensitive personal data unrelated to business operations.
This includes information relating to:

– Health records

– Religious beliefs

 – Political affiliations

– Biometric information

– Criminal history

Businesses should avoid storing this type of information on the platform unless legally required and properly authorized.   

Protecting Children's Privacy

BrandDrive is built for business operations and is not intended for use by children under the age of 18.
The platform does not knowingly collect personal information directly from minors. Businesses using BrandDrive should also avoid intentionally storing or processing children’s personal data unless it is necessary for legitimate business operations and permitted under applicable laws.
If BrandDrive becomes aware that information belonging to a minor has been uploaded or collected improperly, appropriate steps may be taken to remove or restrict access to that data where required.
Parents or guardians who believe a child’s information has been submitted through the platform can contact BrandDrive support for further review and assistance.

Cookies, Login Activity & Device Information

BrandDrive uses cookies and device monitoring tools to improve security, maintain login sessions, and optimize platform performance.
This includes monitoring:

– Login attempts

– Browser activity

– Device sessions

– Account access locations

– Platform usage patterns

These tools help detect suspicious activity, reduce unauthorized access, and improve overall system reliability.

Payments and Financial Data

BrandDrive processes financial activity connected to invoices, POS transactions, wallet activity, transfers, bookkeeping records, and expense tracking.
Sensitive financial operations are protected using encrypted authentication and transaction-level security systems.
For additional protection:

– Transaction passwords are encrypted

– Payment activity is monitored

– Access permissions apply across financial actions

– Unauthorized users cannot access restricted financial records

This permission structure also extends into Nivram AI. Users can only access information they already have permission to view inside BrandDrive itself.

Your Rights and Privacy Controls

Under the Nigeria Data Protection Act (NDPA) 2023, users have rights regarding how their information is managed.
You may request to:

– Access your personal information

– Correct inaccurate records

– Update incomplete information

– Request deletion where legally applicable

– Opt out of marketing communications

Some business records may still need to be retained for accounting, legal, compliance, or audit purposes where required by law.

Securing Your BrandDrive Account

Strong account protection becomes more important as more staff members, financial activity, and customer records are added to your business account.

Enabling Two-Factor Authentication (2FA)

Two-factor authentication adds an additional verification step during login. Even if someone knows your password, they still cannot access your account without the verification code.
To enable 2FA:
Step 1: Open Manage Your Account.
Step 2: Select Two-Factor Authentication.
Step 3: Choose your preferred verification method:

– SMS Verification

– Email Verification

– Google Authenticator

If using Google Authenticator, scan the QR code provided inside BrandDrive to generate secure login codes directly from the app.

Monitoring Login Sessions

BrandDrive allows you to monitor devices currently connected to your account.
To check active sessions:
Step 1: Open Profile Settings.
Step 2: Select Account Security.
Step 3: Open Device Security.
You will see all logged-in devices connected to your account, including whether they are accessing BrandDrive through web or mobile.
This helps you quickly identify unfamiliar login activity.

Reporting Security Concerns

If you notice suspicious login attempts, unusual account activity, unauthorized access, or possible vulnerabilities, contact BrandDrive support immediately.
When reporting a security concern:

– Explain the issue clearly

– Include screenshots if available

– State when the issue occurred

– Include the affected account or feature

You can contact BrandDrive support through:

– Email: [email protected]

– WhatsApp Support

– Official BrandDrive support channels

BrandDrive reviews and resolves all data access or deletion requests within 30 days of submission. 
Protecting operational, financial, and customer data is an important part of maintaining a secure business system. BrandDrive continues to apply security monitoring, authentication controls, and permission-based access to help businesses operate safely across the platform.

How can we help?