NDPR Compliant
1. Who We Are
MSAS FarmAI is operated by MSAS Livestock & Agro Services, a Nigerian agricultural technology company. We provide AI-powered crop and livestock diagnostics, agro-dealer marketplace, veterinary and agronomist consultations, logistics, and farm management tools to farmers across Nigeria.
This Privacy Policy explains how we collect, use, store, and protect your personal data in line with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act 2023.
Our Data Protection Officer can be reached at privacy@msasagro.com. You may also write to us at our registered address in Nigeria.
2. Data We Collect
Account & Identity
- Full name, email address, phone number
- State, LGA, and farm location
- Role on the platform (farmer, vet, agronomist, agro-dealer, rider)
- Profile photo (optional)
- Government/professional credentials uploaded for verification
Agricultural Data
- Farm details, livestock records, poultry records
- Crop and animal images submitted for AI diagnosis
- Soil and pest assessment inputs
- Diagnosis history and AI recommendations
Transaction & Payment Data
- Subscription plan and billing cycle
- Payment references (processed by Paystack — we do not store full card details)
- Wallet balance and withdrawal requests
- Marketplace orders and consultation fees
Technical & Usage Data
- IP address, browser type, device type, operating system
- Login timestamps and session activity
- App feature usage and AI scan frequency
3. How We Use Your Data
- Service delivery — To provide AI diagnoses, process consultations, fulfill marketplace orders, and manage subscriptions
- Payments — To process subscription and service fees via Paystack
- AI model improvement — Anonymised scan data may be used to improve diagnostic accuracy. You may opt out by contacting us.
- Communications — Transactional emails (OTP codes, receipts, consultation updates). We do not send unsolicited marketing without consent.
- Security — Detecting fraud, monitoring unusual login activity, enforcing rate limits
- Compliance — Meeting obligations under Nigerian law
4. Data Sharing
We do not sell your personal data. We share data only with:
- Paystack — for payment processing (subject to Paystack's privacy policy)
- MSAS AI Engine — images and scan metadata are sent to our privately hosted AI service for diagnosis; they are not shared with third-party AI providers
- Experts on the platform — vets and agronomists receive only the consultation details you submit; your full profile is not visible to them
- Logistics riders — receive only your delivery address and order details
- Nigerian regulatory authorities — if required by law or court order
5. Data Retention
- Account data — retained while your account is active and for 30 days after deletion request
- AI scan images and diagnoses — retained for 24 months for diagnostic history, then anonymised
- Payment records — retained for 7 years per Nigerian financial regulations
- Audit logs — retained for 12 months
- Login history — retained for 90 days
6. Your Rights (NDPR)
Under the Nigeria Data Protection Regulation, you have the right to:
- Access — Request a copy of all personal data we hold about you
- Correction — Update inaccurate or incomplete information via your Profile settings
- Deletion — Request account deletion from your Privacy Settings page
- Portability — Request a machine-readable export of your data (JSON format)
- Objection — Object to your data being used for AI model training
- Withdraw consent — Withdraw consent at any time without affecting prior lawful processing
To exercise these rights, go to Account → Privacy Settings within the app, or email privacy@msasagro.com. We respond within 14 days.
7. Security
- All data is transmitted over HTTPS / TLS 1.2+
- Passwords are hashed with bcrypt (12 rounds)
- Two-factor authentication is mandatory for all privileged accounts
- Session data is encrypted at rest in our database
- Payment processing is handled entirely by Paystack — we never see or store card details
- Access to production data is restricted to authorised MSAS staff only
8. Cookies
We use only essential session cookies required for login and security (CSRF protection). We do not use advertising or tracking cookies. No cookie consent banner is required for essential cookies under Nigerian law.
9. Changes to This Policy
We may update this policy from time to time. When we make significant changes, we will notify you by email and display a notice on your dashboard. Continued use of the platform after the effective date constitutes acceptance.