Privacy Policy

01Who We Are

This website is operated by Apostle Osam Nsa, a Digital Systems Architect and Automation Strategist. The site serves as a professional portfolio, lead qualification system, and booking platform for strategy sessions.

02What Information We Collect

We collect information that you voluntarily submit through the chatbot qualification flow and booking system on this site. This includes:

Data Type	What We Collect	How It Is Collected
Identity	Full name	Chatbot input field
Contact — Email	Email address	Chatbot input field
Contact — WhatsApp	Phone number with country code (e.g. +234 801 234 5678)	Chatbot input when WhatsApp is selected as preferred channel
Contact — Telegram	Telegram @username	Chatbot input when Telegram is selected as preferred channel
Qualification data	Organisation type, industry, budget range, project timeline, system type of interest	Multiple-choice selections in the chatbot flow
Booking data	Preferred session date and time	Calendar and time-slot selection in the booking modal
Session preference	Preferred communication platform (Google Meet, WhatsApp, or Telegram)	Multiple-choice selection in chatbot
Technical data	Browser timezone (used only to auto-detect country code for WhatsApp input)	JavaScript Intl API — read-only, not stored

We do not collect payment information, government IDs, passwords, or any sensitive personal categories of data. We do not use cookies for tracking or advertising. We do not fingerprint your browser or device.

03Why We Collect Your Data

We collect and use your personal information solely for the following purposes:

• To qualify your enquiry — your answers to the chatbot questions help us understand your organisation's needs and recommend the right service tier before a session.
• To book your strategy session — your name, email, contact handle, preferred date, and session channel are used to create your calendar appointment and send confirmation details.
• To confirm your booking via email — we send a session confirmation to the email address you provide, including date, time, package details, and how we will reach you.
• To reach you before your session — if you chose WhatsApp or Telegram, The Architect will message you directly on your chosen platform to confirm session details, share any prep materials, and deliver the meeting link (for Google Meet).
• To send follow-up communications — if you did not book a session during your visit, we may send a structured series of emails (up to 4 emails over 7 days, then up to 3 emails over 30 days) relating to our services. Each email includes an unsubscribe link.
• To maintain an internal CRM record — your information is stored in a private Google Sheet accessible only to Apostle Osam Nsa, used for lead management and correspondence history.
• To improve our service — aggregated, non-identifying information (e.g. which industries enquire most) may be reviewed to improve the site experience.

04Legal Basis for Processing

Where applicable data protection law applies (including GDPR for EU/UK contacts and Nigeria's NDPA), we process your data under the following lawful bases:

• Contract performance — processing necessary to book and deliver your strategy session.
• Legitimate interests — sending relevant follow-up communications to people who have expressed interest in our services. You can withdraw consent at any time via the unsubscribe link in any email.
• Consent — where you voluntarily submit your WhatsApp number or Telegram username, you are consenting to being contacted on those platforms in relation to your booked session.

05Where Your Data Is Stored

Your data is processed and stored using the following infrastructure, all operated under your own consent and subject to their respective privacy policies:

Service	Purpose	Data Stored
Google Sheets (sheets.google.com)	CRM — internal lead database	Name, email, contact handle, qualification answers, booking details, lead score, email send history
Google Calendar (calendar.google.com)	Session scheduling	Name, email, contact handle, session date/time, package, industry
Google Apps Script (script.google.com)	Automation backend — processes form submissions, triggers emails, creates calendar events	Processes all submitted data in transit; does not store separately
Gmail / MailApp (Google Workspace)	Sending confirmation and follow-up emails	Email address, name, booking details (in email threads)
Browser localStorage (your device only)	Storing your booked time slots locally to prevent double-booking on the same device	Booking date/time keys only — no personal data

All Google services are subject to Google's Privacy Policy. Data stored in Google Sheets is accessible only to the Google account of Apostle Osam Nsa. No data is stored on external servers beyond the Google Workspace infrastructure described above.

06How Long We Keep Your Data

• Active leads and booked clients — your record is retained for as long as there is a legitimate business relationship or active correspondence, and for up to 3 years after last contact for business and legal record-keeping purposes.
• Unsubscribed contacts — your email address is retained in a suppression state (marked "Unsubscribed") so that we do not accidentally contact you again. We do not delete unsubscribed records; we disable them.
• Calendar events — session records on Google Calendar are retained as part of normal calendar history. You can remove your event from your own calendar at any time.
• Browser localStorage — slot booking data stored locally on your device persists until your browser storage is cleared. It contains no personal data.

You may request deletion of your personal data at any time by emailing osamnsa@gmail.com. We will respond within 30 days.

07Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request that we correct inaccurate or incomplete data.
• Right to erasure — request that we delete your personal data ("right to be forgotten").
• Right to restrict processing — ask us to stop using your data while a dispute is resolved.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — for WhatsApp/Telegram contact, you may withdraw consent by notifying us in writing and we will stop reaching out on that channel.

To unsubscribe from emails immediately: use the unsubscribe link at the bottom of any email we send you, or email us directly. Unsubscription is processed instantly in our system.

08Third Parties & Disclosure

We do not sell, trade, rent, or disclose your personal data to any third party except:

• Google LLC — as the infrastructure provider for Sheets, Calendar, Gmail, and Apps Script (as described above). Google processes data under its own privacy policy and Data Processing Agreements.
• Legal obligation — if required by law, court order, or governmental authority, we may be required to disclose your information.
• Business transfer — in the unlikely event that this business is transferred or merged, your data would transfer as part of that process. You would be notified in advance.

WhatsApp (Meta Platforms) — if you book a session via WhatsApp, The Architect will contact you using WhatsApp. WhatsApp's own privacy policy governs that communication. Telegram (Telegram FZ-LLC) — similarly, Telegram's own privacy policy governs any messages sent via their platform.

09Security

We take reasonable measures to protect your personal data, including:

• All data is transmitted over HTTPS (encrypted in transit). Your name, email, and contact handle are never transmitted in URLs or browser address bars.
• Booking data is sent via HTTP POST to Google Apps Script — not as URL parameters — preventing exposure in browser history, server logs, or referrer headers.
• The Google Sheet containing your data is private and accessible only via the authenticated Google account of Apostle Osam Nsa.
• No payment card data, passwords, or sensitive personal categories are ever collected or stored by this site.

Despite these measures, no method of transmission over the internet is 100% secure. We will notify affected individuals if a data breach occurs that is likely to result in risk to their rights and freedoms, in accordance with applicable law.

10Children's Privacy

This website and its services are intended for business owners, organisational leaders, and professional adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data through this site, please contact us at osamnsa@gmail.com and we will delete it promptly.

11International Visitors

This site is operated from Nigeria and serves an international audience. If you are located outside Nigeria — including in the European Union, United Kingdom, United States, or elsewhere — please be aware that your data is processed and stored within Google's global infrastructure, which may include servers outside your home country.

Where you are in the EU or UK, we process your data in accordance with the General Data Protection Regulation (GDPR). Where you are in Nigeria, we process your data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and its accompanying regulations.

12Cookies & Tracking

This website does not use cookies. It does not use cookies for tracking, advertising, or analytics of any kind. The only browser storage used is localStorage — stored locally on your device — to remember which time slots have been booked so the calendar shows accurate availability. This localStorage data contains no personal information (only date/time slot keys), is never transmitted to us, and can be cleared by clearing your browser data.

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking script.

13Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes, we will notify active contacts by email where we have your address. Continued use of the site after changes are posted constitutes your acceptance of the updated policy.

14Contact & Complaints

If you are in the EU or UK and believe we have not handled your data in compliance with GDPR, you have the right to lodge a complaint with your local data protection supervisory authority. If you are in Nigeria, you may contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.