SMEbuddy Terms of Service

The Platform is designed for and made available to small and medium enterprises operating in Nigeria.

By creating an Account, you represent and warrant that:

• You are at least 18 years of age.
• You have the legal capacity and authority to enter into these Terms, whether on your own behalf or on behalf of a business entity.
• The information you provide during registration is accurate, current, and complete.
• You will maintain the accuracy of your registration information and promptly update it when it changes.

You are responsible for maintaining the confidentiality of your Account credentials. You must not share your login credentials with any person outside your authorised staff. You accept full responsibility for all activity that occurs under your Account.

You must notify us immediately at support@sme-buddy.com if you suspect unauthorized access to your Account.

Lumion reserves the right to decline Account registrations or suspend Accounts at its discretion, including where there are reasonable grounds to suspect fraud, misuse, or a breach of these Terms.

Lumion grants you a limited, non-exclusive, non-transferable, revocable licence to access and use the Platform during the term of your Subscription, solely for the purposes of managing your business operations in accordance with these Terms.

The Platform includes, among other features:

• Sales, expense, invoice, and inventory management.
• Production batch tracking for applicable business types.
• Staff and payroll management, including the storage of employee personal data such as names, salaries, and attendance records.
• Financial reporting and business analytics.
• The Loan Readiness Report feature (further described in Clause 4).
• The AI Manager feature (further described in Clause 5).

Lumion may, at its sole discretion, modify, update, enhance, or discontinue any feature or functionality of the Platform at any time. We will endeavour to provide reasonable prior notice of material changes where practicable.

The Platform is provided on an “as is” and “as available” basis. Lumion does not warrant that the Platform will be uninterrupted, error-free, or free from security vulnerabilities, although we implement the security measures described in our Data Protection Policy.

The Platform includes a Loan Readiness Report feature that automatically calculates a creditworthiness indicator derived from your business transaction history and generates a report that you may choose to present to a financial institution.

Important Disclaimer: The Loan Readiness Report is a financial intelligence tool designed to support and inform your own decision-making. It does not constitute a credit decision, a credit assessment, or a financial recommendation by Lumion. Lumion is not a financial institution and does not have authority to approve or decline credit applications.

The report is generated based solely on the data you have entered into the Platform. Its accuracy depends entirely on the completeness and accuracy of your Business Data. Lumion makes no representation that any financial institution will accept, rely upon, or be influenced by the report.

You are solely responsible for any decision you make in reliance on the Loan Readiness Report. Lumion accepts no liability for any outcome arising from the use or presentation of the report to any third party.

In accordance with the Nigeria Data Protection Act 2023 and the General Application and Implementation Directive 2025, we disclose that the creditworthiness indicator is produced by automated calculation from your transaction data. No human review of your individual business profile is undertaken by Lumion in generating the report. You have the right to request a manual review of the underlying calculation methodology by contacting us at support@sme-buddy.com.

The Platform includes an AI Manager feature that generates daily business performance summaries and insights. This feature operates by transmitting anonymised and aggregated business performance data to a third-party artificial intelligence service for the purpose of generating these summaries.

Lumion confirms that:

• No personally identifiable data about your identified customers, named employees, or named suppliers is transmitted to the AI.
• Data transmitted is anonymised and aggregated at the business performance level.
• Lumion has assessed this processing arrangement in accordance with the requirements of the NDPA 2023 and has entered into appropriate data processing terms with such AI company.

A full description of this processing activity, including the cross-border transfer mechanism applicable to the transmission of data to any AI platform US-based infrastructure, is contained in our Data Protection Policy.

By using the AI Manager feature, you consent to the processing described in this Clause 5 and in the Data Protection Policy.

You own your Business Data. Lumion does not claim any ownership over the Business Data that you enter into the Platform.

By using the Platform, you grant Lumion a limited, non-exclusive, royalty-free licence to store, process, and use your Business Data solely to the extent necessary to provide the Services to you, including to operate the Platform, generate reports and analytics for your benefit, and discharge our obligations under these Terms.

Lumion owns and retains all rights in and to the Platform, the underlying technology, the algorithms, the intelligence engine, the visual design, the source code, the trade marks, and all intellectual property created by or belonging to Lumion. Nothing in these Terms transfers any such rights to you.

Right to Export. You have the right to export your Business Data from the Platform at any time in a structured, commonly used, and machine-readable format. This right applies both during your active Subscription and for a period of thirty (30) days following the termination of your Account.

Every action taken on the Platform, including data entries, edits, deletions, logins, and system events, is recorded in a permanent audit trail.

The audit trail cannot be deleted. The retention of audit logs is necessary for the following legitimate purposes:

• Security: to detect and investigate unauthorised access, fraudulent activity, and system breaches.
• Accountability: to maintain a reliable record of all transactions and actions for business governance purposes.
• Legal compliance: to comply with applicable laws and regulations, including tax, financial reporting, and data protection obligations.

Where a data subject exercises a right to erasure under the NDPA 2023, Lumion will delete or anonymise the relevant personal data in the Platform’s operational records. However, references to system events recorded in the audit trail may be retained in anonymised form where necessary for security and accountability purposes.

Full details of audit trail processing are contained in the Data Protection Policy.

Access to the Platform requires a paid Subscription Plan. The available plans, pricing, and features are published at sme-buddy.com/pricing and may be updated from time to time.

Subscriptions are billed on the cycle applicable to your selected plan (monthly or annually). Payment is processed through Paystack, our third-party payment processor. By providing payment details, you authorise Lumion (through Paystack) to charge the applicable fees on each billing cycle.

All fees are payable in Nigerian Naira (NGN) unless otherwise specified. Subscription fees are non-refundable except where:

• Required by applicable Nigerian law.
• Lumion discontinues the Platform with less than thirty (30) days prior notice.
• Lumion determines at its discretion that a refund is warranted.

Failure to make payment will result in suspension of your Account. Access will be restored within fourty eight (48) hours of successful payment.

Lumion reserves the right to revise its pricing with at least thirty (30) days’ notice. Your continued use of the Platform after the notice period constitutes acceptance of the revised pricing.

You agree to use the Platform only for lawful purposes and in accordance with these Terms. You must not:

• Use the Platform in any way that violates Nigerian law or applicable regulations.
• Upload, store, or transmit any data that is unlawful, defamatory, fraudulent, or that infringes the rights of any third party.
• Attempt to gain unauthorised access to any part of the Platform, our servers, or any third-party systems connected to the Platform.
• Introduce any virus, malware, or other harmful code into the Platform.
• Reverse-engineer, decompile, disassemble, or otherwise attempt to derive the source code of the Platform.
• Use the Platform to process the personal data of third parties except where you have a lawful basis to do so under the NDPA 2023 and applicable data protection law.
• Resell, sublicense, or otherwise make the Platform available to any third party without Lumion’s prior written consent.
• Use automated means, including bots or scrapers, to access or extract data from the Platform.

Lumion reserves the right to investigate suspected breaches of this Clause and to suspend or terminate your Account without notice where a serious breach is established.

Lumion is committed to processing all personal data in accordance with the NDPA 2023 and the General Application and Implementation Directive 2025. A full description of our data processing activities, the legal bases relied upon, data subject rights, retention periods, and cross-border transfer safeguards is set out in our Data Protection Policy at sme-buddy.com/privacy.

Subscriber as Controller for Third-Party Data. Where you enter the personal data of your customers, suppliers, or employees into the Platform, you act as the data controller in respect of that personal data, and Lumion acts as a data processor on your behalf. You are responsible for ensuring that you have a lawful basis under the NDPA 2023 for entering and processing that personal data through the Platform.

You acknowledge that:

• Employee personal data, including names, salaries, and attendance records entered through the Payroll module, is processed by Lumion’s systems on your instruction.
• Employees whose data is entered into the Platform are data subjects with rights under the NDPA 2023, and you are responsible for informing them that their data is being processed through a third-party system.
• Lumion’s status as data processor does not diminish your obligations as data controller.

Cross-Border Transfers. The Platform infrastructure involves third-party service providers located primarily in the United States. Lumion has implemented appropriate transfer safeguards for all cross-border data transfers, including Standard Contractual Clauses where applicable. Full details are in the Data Protection Policy.

By accepting these Terms, you also accept our Data Protection Policy and Cookie Policy, which are incorporated herein by reference.

Lumion engages third-party service providers to deliver the Platform. The current list of providers includes:

• Supabase (database and authentication infrastructure, running on AWS).
• Vercel (frontend hosting and server-side request processing).
• Termii (Nigerian SMS provider for OTP delivery).
• Paystack (subscription billing and payment processing).
• Anthropic (AI Manager feature — anonymised data only).
• Sentry (application error monitoring and session diagnostics).
• PostHog (product analytics and user interaction tracking).
• Upstash (rate limiting and security processing).
• Resend (transactional email delivery).
• Cloudinary (user-uploaded image hosting, pending migration to Supabase Storage).

Lumion is not responsible for the independent privacy practices or security measures of these providers beyond ensuring that appropriate contractual safeguards are in place.

The Platform does not integrate with any advertising networks and does not share your data with advertisers. SMEbuddy is and will remain entirely free of advertising.

Each party agrees to keep confidential all information disclosed by the other party that is designated as confidential or that reasonably ought to be treated as confidential given its nature.

Lumion will not disclose your Business Data to any third party except:

• To its Third-Party Processors as described in Clause 12 and the Data Protection Policy.
• As required by law, court order, or the lawful directive of a regulatory authority.
• With your express written consent.

You agree to maintain the confidentiality of any non-public information about the Platform, including technical documentation, security practices, and pricing structures.

To the maximum extent permitted by Nigerian law, Lumion’s total cumulative liability to you arising from or relating to your use of the Platform shall not exceed the total subscription fees paid by you in the three (3) calendar months immediately preceding the event giving rise to the claim.

Lumion shall not be liable for any:

• Loss of profits, revenue, or anticipated savings.
• Loss of Business Data (except where caused by Lumion’s gross negligence or wilful misconduct).
• Indirect, consequential, incidental, or special damages.
• Business interruption losses.
• Loss resulting from your failure to maintain adequate backups of your Business Data.

Lumion may suspend or terminate your Account with immediate effect if:

• You materially breach these Terms and (where the breach is capable of remedy) fail to remedy the breach within fourteen (14) days of written notice.
• You fail to pay subscription fees and do not rectify the failure within seven (7) days of notice.
• Lumion has reasonable grounds to believe that your Account is being used for unlawful purposes.
• You become insolvent or subject to any insolvency proceedings.

Lumion may also terminate these Terms on thirty (30) days’ written notice without cause. In such a case, a pro-rated refund of prepaid subscription fees will be provided.

Effect of Termination. Upon termination, your licence to access the Platform ceases immediately (or at the end of the billing cycle for user-initiated closure). Lumion will retain your Business Data for the period specified in Clause 11 before deletion or anonymisation, unless you request earlier deletion in writing.

Governing Law. These Terms are governed by and shall be construed in accordance with the laws of the Federal Republic of Nigeria, including the NDPA 2023, the Companies and Allied Matters Act 2020, and other applicable Nigerian legislation.

Negotiation. In the event of any dispute, claim, or controversy arising out of or relating to these Terms or the Platform, the parties shall first attempt to resolve the matter through good-faith negotiation. Either party may initiate negotiation by delivering a written notice describing the dispute to the other party. The parties will have thirty (30) days from the date of such notice to attempt resolution.

Mediation. If the dispute is not resolved by negotiation within thirty (30) days, the parties shall submit the dispute to mediation administered by a mutually agreed mediator. Each party shall bear its own costs of mediation equally, unless otherwise agreed.

Litigation. If mediation does not resolve the dispute within sixty (60) days of appointment of the mediator, either party may refer the dispute to litigation. The parties submit to the exclusive jurisdiction of the courts of Lagos State, Nigeria.

Entire Agreement. These Terms, together with the Data Protection Policy and Cookie Policy, constitute the entire agreement between you and Lumion relating to the Platform and supersede all prior agreements, representations, and understandings.

Amendments. Lumion may amend these Terms at any time by posting the updated version at sme-buddy.com/terms. For material amendments, Lumion will provide at least fourteen (14) days’ prior notice by email. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Terms.

Severability. If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.

Waiver. No failure or delay by Lumion in exercising any right or remedy under these Terms shall constitute a waiver of that right or remedy.

Assignment. You may not assign or transfer any of your rights or obligations under these Terms without Lumion’s prior written consent. Lumion may assign its rights and obligations to an affiliate, successor entity, or acquirer of the business with prior written notice to you.

Force Majeure. Lumion shall not be liable for any delay or failure to perform its obligations caused by circumstances beyond its reasonable control, including but not limited to acts of God, telecommunications failures, power outages, government actions, or civil unrest.

Notices. All notices under these Terms shall be sent to Lumion at support@sme-buddy.com and to you at the email address registered to your Account. Notices sent by email are effective upon transmission provided no delivery failure notification is received.

Relationship of Parties. Nothing in these Terms creates a partnership, joint venture, agency, or employment relationship between the parties.