What happens to your documents.

01Who is responsible for what.

You decide what is uploaded. Takarda processes it for you, with a cloud provider as our sub-processor. The privacy notice names it. For your account details, such as your name, work email and billing record, Takarda is the controller. The basis is the Nigeria Data Protection Act and the Commission's directive.

02The law we work to.

We work to the Nigeria Data Protection Act and the Commission's implementation directive. If we become aware of a breach of data we process for you, we tell you without delay, so you keep your 72 hours to tell the Commission.

03The path of a file.

Page images go to Takarda AI, and a page's text on a retry. Your lists, account details and downloads do not.

04Where it is stored.

Files, values and the audit log are stored in Johannesburg, South Africa, outside Nigeria. Files travel over an encrypted connection and are stored encrypted. Our provider has no Nigerian region (the privacy notice links to its terms). Storing files in Johannesburg, South Africa is itself a transfer out of Nigeria, and your agreement with us records it.

05Where Takarda AI runs.

To read a page, we send the page image, and on a retry its text, to our cloud provider's servers. Takarda AI reads each page in the European Union. Under the Act this is a cross-border transfer, and your agreement with us records it.

We do not send your product list, customer list, price lists or account name. The descriptions of the fields you named go with the page. The page carries whatever is printed on it, so a name or phone number on the document goes with it.

The provider says it does not use customer data to train its models without permission; its terms are linked from the privacy notice. If your contract needs all processing inside Nigeria or Africa, tell us before you sign: we cannot offer it.

06How your records are protected.

Every upload is fingerprinted when it arrives and the original is never changed. Every correction and confirmation joins a chained audit log. A confirmed file is frozen: a change makes a new version and the old one stays. The log shows who changed what and when. It does not show that a document's contents are right.

07Documents you send for a demo.

A document you send us for a demo is read in the same way. We use it only for your demo, it is never billed to anyone or used to train a model, and we delete it when you ask.

08Access.

Accounts are kept apart. Every query is limited to your account, and a test tries every route with another account's ids. Owners sign in with a second step. Passwords are stored as Argon2id hashes. Browser requests that change data carry a one-time token. Sign-in, sign-up and uploads are rate limited.

09Names and numbers on a document.

The names and phone numbers on a document belong to the people it names. They are stored with the file and deleted with it. Name only the fields you need: Takarda reads what you ask it to read, and nothing else.