GioBiz

Data Retention Policy

Version 2026-10-10 · Last updated: 10 October 2026 · GioBiz platform
What this page covers How long GioBiz keeps each kind of data, why, and how it is removed. It applies to everyone who uses GioBiz — business owners, staff, riders, logistics and warehouse users, job seekers, and people who order through a shop link. Read it with our Privacy Policy, which says what we collect and who receives it.

GioBiz is run by Henmack Integrated Technologies Ltd (RC 9537539). Our rule is simple: we keep data while it is needed to give you the service, to meet the law, or to settle a dispute — and no longer.

1. How we decide how long to keep something

For some data we have a fixed time. For others we have not yet set a number of days. Where there is no fixed time, we ask three questions:

  • Do you still need it to use GioBiz (for example, your account is still open)?
  • Does a Nigerian law say we must keep it (for example tax and accounting records)?
  • Do we need it to show what happened in a dispute, a fraud case or a security problem?

If the answer to all three is no, the data should be deleted. We will add fixed times to this page as we set them, and change the version date at the top when we do.

2. How long we keep each kind of data

Data How long Why
One-time codes (OTP)Deleted when used, or after at most 10 minutesSign-in and recovery
Account details, business records, products, customers, staffWhile your account is open; deleted when a deletion request is completed (see section 3)To run the service
Sales, orders, invoices, payments, tax recordsWhile your account is open, and after it closes for the period Nigerian tax and accounting law requires (up to 7 years)Legal obligation
Orders placed through a shop link (buyer name, phone, address)While the shop's account is open; then as sales records aboveThe shop's order history, deliveries, disputes
Identity check results (verified name, date of birth, face-match score, masked ID number, reference)While your account is openTo show you were checked; re-checks
ID photos and selfies kept for a check by a personNo fixed time yet. Kept in private storage while your account is open; deleted when a deletion request is completedTo review and, if challenged, show the check
Rider live locationLive tracking keeps only the rider's latest position; each new position replaces the last one. A location saved as proof of pickup or delivery stays with that shipment recordTracking the delivery in progress
Shipment addresses and map pointsWith the shipment record, as business records aboveDelivery history and disputes
Messages, chats and attachmentsNo fixed time yet. While the account they belong to is openConversation history for the business
Jobs and Talent (profiles, CVs, answers)No fixed time yet. While your account is open, or until you remove themJob applications and matching
Ask Gio questions and answersNo fixed time yet. Kept with your account; recent answers are also saved with our AI cache provider (Upstash)Answering you and faster repeat answers
Records of what you agreed to (terms, policies, consents), with IP address and device detailsWhile your account is open, and afterwards for as long as we may need to show what was agreed (for example in a dispute)Proof of consent and agreement
Activity and audit logsNo fixed time yet. As long as needed for security and disputesSecurity, fraud, disputes
Error reports and server logsFor the time our error-report (Sentry) and hosting (Cloudflare) providers keep them, and in our own error log with no fixed time yetFinding and fixing faults
Team alerts in our private Telegram chatUntil we delete them; they are not deleted automaticallyRunning the service day to day
Signed-in sessions on a deviceUntil you sign out or the session is endedSecurity
BackupsA copy is made every day. Old copies are removed as they are replaced; our target is 30 daysRecovery after a disaster
Marketing emails and browser notificationsUntil you turn them offYour consent

3. Deleting an account

  • How to ask: business owners use Settings → Delete my account in the app. Everyone else, or anyone who cannot sign in, emails support@giobiz.com. See Account Deletion.
  • What happens: deletion is a request we complete within 30 days. We first check the request really comes from the account holder.
  • What we keep: some records the law requires us to keep — sales, payments and tax records — are kept for the legal period and then deleted.
  • Backups: copies in backups disappear as old backups are replaced.

4. Your rights

Under the Nigeria Data Protection Act (NDPA) 2023 you can ask to see, correct, delete, restrict or take a copy of your data, object to how we use it, and withdraw consent you gave. Email support@giobiz.com with "Data Protection" in the subject. We reply within 7 days and complete requests within 30 days. You can also complain to the Nigeria Data Protection Commission (NDPC). Full details are in section 10 of the Privacy Policy.

5. Security

Data travels over encrypted connections (HTTPS). Each business's data is kept separate from every other business's. ID photos, selfies and message attachments are kept in private storage. Bank payout details are stored with restricted access; card details never reach GioBiz.

6. Changes

When we change this page we update the version and date at the top. For important changes we will also tell you in the app or by email.

7. Contact

  • Email: support@giobiz.com
  • Data Protection contact: [Data Protection Officer — name to be added by GioBiz], via support@giobiz.com
  • Henmack Integrated Technologies Ltd (RC 9537539), Lagos, Nigeria