Privacy Policy

We collect what you put into your account and business profile, we use it to run Habaqa, including showing your business to approved investors, the way you control, and we don’t sell it to anyone. Delete your account any time; everything is erased for good after a 30-day recovery window, except grant applications, which we keep as the record of each grant. We also measure how Habaqa is used, with your text, money and customer details hidden, to find and fix problems, and you can turn that off. Details below, in plain language. Anything unclear: hello@habaqa.com.

Habaqa is run by Promoat Investments Ltd (“we”, “us”, “our”), a company registered in Nigeria, the investment firm behind promoatcapital.com and The Drawbridge Grant. For anything related to your personal data, contact hello@habaqa.com.

Your account. Your name, email address, and password (stored only as a secure hash, which we can’t read). If you sign in with Google, we receive your name and email from Google instead.

Your business profile. What you choose to fill in: business details, financial bands (never exact figures unless you type them into free-text fields), team, customers, assets, funding ask, photos, and logo.

Investor profiles and funding requests. If you apply as an investor: your name, firm, location, interests, and ticket range. When investors and businesses interact, we store the requests, messages, and decisions.

Investor subscription details. If you subscribe for investor access, our payment processor handles the payment and we keep the record of it: what you are subscribed to, whether it is active, when it renews, and the last four digits and type of the card. We never see or store your full card number.

Your grant applications. When you apply for a grant, we keep what you send: your contact details, your business details, how you’d use the grant, and your answers to that grant’s own questions, along with where it stands in review. Applications you make on Habaqa are linked to your account and business. If you applied to The Drawbridge Grant on promoatcapital.com, that application is stored here too and linked to your account by email address, so you can track it here.

Collected automatically. Our hosting provider records basic technical logs (IP address, browser type, pages served) to run the platform and keep it secure. The sign-up and sign-in forms are protected by Google reCAPTCHA, which collects device and behaviour signals to tell people apart from bots, under Google’s own privacy policy and terms.

We don’t run advertising trackers. We do measure how Habaqa is used; see How we measure and improve Habaqa.

To find what is confusing or broken and fix it, we count how Habaqa is used: which pages and buttons people use, which forms they start and finish, and which error messages they see. For people signed in to the app, we also record sessions, so we can watch where someone got stuck.

What stays hidden. In recordings, everything you type and the words and figures on the screen are hidden, including money amounts, names, phone numbers and email addresses. Photos, logos and documents are not recorded. We see the layout, the menus and where people press. A business’s own pages that its customers open (its shop, invoices, receipts, booking pages, link in bio and website) are never recorded.

What it is linked to. Your account’s internal number, never your name or email. For a business, its name, sector and place, which are already on its public pages. When a customer pays a business or places an order, we count it for the business without recording anything about the customer, and amounts go in broad bands, never exact figures.

Error reports. When something breaks, a report of what broke, on which page, and your account’s internal number is sent to us, with names, emails and amounts removed. Error reports keep running even if you turn measuring off, because we need them to keep the service working.

The tools. PostHog (usage and recordings), Sentry (error reports) and Google Cloud (logs and alerts). They store this data primarily in the United States.

How long. Recordings are kept for about 30 days, usage data for up to seven years, and error reports for up to 90 days.

Your choice. If you are in the UK, the European Union or the European Economic Area, we ask before measuring anything, and nothing is measured until you press Accept. Anyone can change their answer with Privacy choices at the foot of any page. Signed in to the app, untick Help improve Habaqa under Privacy on your Account page and it stops on every device you use.

• To run your account and the platform itself.
• To show your business to approved investors, the part you control. Every business profile’s story side (name, one-liner, sector, location, founding year, team, customers, channels, photos, About) is visible to approved investors. Your financial bands, registration number, assets, loans, use of funds, and contact details are shared only with an investor whose funding request you accept, and you can end that access later.
• To review investor applications before anyone sees the directory.
• To run the grants you apply for: reviewing applications, checking eligibility, shortlisting, interviewing, and paying awards.
• To review a Raise Capital application if your business sends one, as described in Raise Capital.
• To send you emails the platform needs: confirming your address, resetting your password, telling you about funding requests and decisions, and confirmations and updates on your grant applications. We may also send occasional emails about Habaqa itself, such as new tools, tips, and offers; you can opt out of those any time by emailing us.
• To find and fix problems and improve Habaqa, as described in How we measure and improve Habaqa.
• To protect the platform from spam, fraud, and abuse.
• To meet legal and regulatory obligations.

We use your information because you asked us to (by creating an account and filling your profile), because we have a legitimate interest in running a trustworthy platform, or because the law requires it.

We don’t sell your personal information, and we don’t share it with advertisers. It is shared only:

• With approved investors, as described above:story-side profile to all of them, full profile and contact only to those you accept.
• If you win a grant, publicly when we announce winners: your business name, your first name, and a short description (see the Grants section of our Terms).
• If your business applies to Raise Capital, with Promoat’s review team and the investor panel members assigned to your application, some of whom are not Promoat employees (see Raise Capital).
• With the service providers that run the platform: Google Cloud (hosting and photo storage), Neon (database), Resend (email), Google (sign-in and reCAPTCHA), Stripe (investor subscription payments), PostHog (usage measurement and recordings) and Sentry (error reports). Your data passes through them so the platform can work.
• With professional advisers (lawyers, accountants) under confidentiality, with authorities when the law requires it, or as part of a business transaction such as a merger, in which case this policy still applies.

When your business applies to raise capital from Promoat Investments Ltd, we use what you send (amount, use of funds, why now, documents and answers we ask for, and interview notes) together with your business’s Habaqa profile, badges and records: how long the account has been open, how often it is used, money taken through Habaqa, and counts of invoices, expenses and customers. From these we work out a readiness score, shown to you and to the review team. Payments made in test mode are never counted.

Your application is seen by Promoat’s review team and by the investor panel members we assign to it. The panel includes people who are not Promoat employees. Each has signed a confidentiality agreement, sees only the applications assigned to them, and sees your business’s figures as totals and trends only, never your customers’ details or your contact details. Investors on the Habaqa register never see an application or a score.

We use your information for this because you asked us to review your application, and to take steps before entering into an agreement with you. The full rules are in the Raise Capital Terms.

Our providers store data primarily in the United States. If you’re in Nigeria or elsewhere, that means your information is transferred internationally. We use established providers with strong security practices and protect your data the same way wherever it sits.

Your data stays as long as your account is active. When you delete your account, your profile and businesses disappear from the platform immediately; we keep the underlying data for 30 days so you can change your mind and restore it by signing back in. After 30 days it is permanently erased, except records we’re legally required to keep, your grant applications, which we keep as the record of each grant: who applied, what they sent, and the decision, and your Raise Capital applications, which we keep the same way as the record of each decision, no longer linked to you. You can also request deletion by email any time. Usage data, recordings and error reports follow the periods in How we measure and improve Habaqa.

Depending on where you live, including under the Nigeria Data Protection Act, 2023, you have the right to:

• Ask what personal information we hold about you.
• Ask us to correct anything that’s wrong (most of it you can edit yourself, from your profile).
• Ask us to delete your information, or just use the delete button on your Account page.
• Object to or limit how we use it.
• Withdraw consent you previously gave, including turning off usage measurement (Privacy choices, or Help improve Habaqa on your Account page).
• Complain to your data protection authority. In Nigeria, that is the Nigeria Data Protection Commission.

To exercise any of these, email hello@habaqa.com. We’ll respond within a reasonable time, and we may ask you to confirm your identity first.

The platform uses an essential cookie that keeps you signed in, and one that remembers your Privacy choices answer for 12 months. PostHog sets analytics cookies and browser storage to recognise a returning visitor across habaqa.com and the app; where we ask first, they are set only after you press Accept, and never once you turn measuring off. No advertising cookies. Google reCAPTCHA may set its own cookies to do its job of telling people apart from bots.

Everything travels encrypted (HTTPS), passwords are hashed, photos live in a private storage bucket that only the platform can read, and access to the database is limited to our own server code. No system is perfectly secure, but we take reasonable measures to protect what you share with us.

Habaqa is for people running or backing businesses. It isn’t directed at anyone under 18, and we don’t knowingly collect information from them.

If we change this policy, we’ll update this page and the date at the top. A meaningful change to how we handle your data will be flagged more visibly than a quiet edit.

Questions, requests, or concerns: hello@habaqa.com.