Privacy Policy

We collect what you put into your account and business profile, we use it to run Habaqa — including showing your business to approved investors, the way you control — and we don’t sell it to anyone. Delete your account any time; everything is gone for good after a 30-day recovery window. Details below, in plain language. Anything unclear: capital@promoat.co.

Habaqa is run by Promoat Capital Ltd (“we”, “us”, “our”), a company registered in Nigeria — the investment firm behind promoatcapital.com and The Drawbridge Grant. For anything related to your personal data, contact capital@promoat.co.

Your account. Your name, email address, and password (stored only as a secure hash — we can’t read it). If you sign in with Google, we receive your name and email from Google instead.

Your business profile. What you choose to fill in: business details, financial bands (never exact figures unless you type them into free-text fields), team, customers, assets, funding ask, photos, and logo.

Investor profiles and funding requests. If you apply as an investor: your name, firm, location, interests, and ticket range. When investors and businesses interact, we store the requests, messages, and decisions.

Your grant application. If you applied to The Drawbridge Grant, the application you submitted on promoatcapital.com is linked to your account by email address, so you can track it here.

Collected automatically. Our hosting provider records basic technical logs (IP address, browser type, pages served) to run the platform and keep it secure. The sign-up and sign-in forms are protected by Google reCAPTCHA, which collects device and behaviour signals to tell people apart from bots, under Google’s own privacy policy and terms.

We don’t run advertising trackers or analytics cookies on the platform.

• To run your account and the platform itself.
• To show your business to approved investors — the part you control. Every business profile’s story side (name, one-liner, sector, location, founding year, team, customers, channels, photos, About) is visible to approved investors. Your financial bands, registration number, assets, loans, use of funds, and contact details are shared only with an investor whose funding request you accept — and you can end that access later.
• To review investor applications before anyone sees the directory.
• To send you emails the platform needs: confirming your address, resetting your password, telling you about funding requests and decisions, and updates on your grant application if you opted to receive them. We may also send occasional emails about Habaqa itself, such as new tools, tips, and offers; you can opt out of those any time by emailing us.
• To protect the platform from spam, fraud, and abuse.
• To meet legal and regulatory obligations.

We use your information because you asked us to (by creating an account and filling your profile), because we have a legitimate interest in running a trustworthy platform, or because the law requires it.

We don’t sell your personal information, and we don’t share it with advertisers. It is shared only:

• With approved investors, as described above — story-side profile to all of them, full profile and contact only to those you accept.
• With the service providers that run the platform: Google Cloud (hosting and photo storage), Neon (database), Resend (email), and Google (sign-in and reCAPTCHA). Your data passes through them so the platform can work.
• With professional advisers (lawyers, accountants) under confidentiality, with authorities when the law requires it, or as part of a business transaction such as a merger — in which case this policy still applies.

Our providers store data primarily in the United States. If you’re in Nigeria or elsewhere, that means your information is transferred internationally. We use established providers with strong security practices and protect your data the same way wherever it sits.

Your data stays as long as your account is active. When you delete your account, your profile and businesses disappear from the platform immediately; we keep the underlying data for 30 days so you can change your mind and restore it by signing back in. After 30 days it is permanently erased, except records we’re legally required to keep (and your grant application, which is governed by the promoatcapital.com privacy policy). You can also request deletion by email any time.

Depending on where you live — including under the Nigeria Data Protection Act, 2023 — you have the right to:

• Ask what personal information we hold about you.
• Ask us to correct anything that’s wrong (most of it you can edit yourself, from your profile).
• Ask us to delete your information — or just use the delete button on your Account page.
• Object to or limit how we use it.
• Withdraw consent you previously gave.
• Complain to your data protection authority — in Nigeria, the Nigeria Data Protection Commission.

To exercise any of these, email capital@promoat.co. We’ll respond within a reasonable time, and we may ask you to confirm your identity first.

The platform uses one essential cookie: the session cookie that keeps you signed in. No advertising or analytics cookies. Google reCAPTCHA may set its own cookies to do its job of telling people apart from bots.

Everything travels encrypted (HTTPS), passwords are hashed, photos live in a private storage bucket that only the platform can read, and access to the database is limited to our own server code. No system is perfectly secure, but we take reasonable measures to protect what you share with us.

Habaqa is for people running or backing businesses. It isn’t directed at anyone under 18, and we don’t knowingly collect information from them.

If we change this policy, we’ll update this page and the date at the top. A meaningful change to how we handle your data will be flagged more visibly than a quiet edit.

Questions, requests, or concerns: capital@promoat.co.