BackLMNT

Privacy Notice

Last updated: June 8, 2026

This Privacy Notice explains how ExProMedia ("ExProMedia", "we", "us") collects, uses, shares, and protects personal data when you use LMNT (the "Service"). ExProMedia is the data controller responsible for your personal data in connection with the Service.

1. Personal data we collect

  • Account data — email address, display name, password hash, authentication provider (e.g. Google).
  • Profile data — display name and any preferences you set.
  • Content you submit — project briefs, titles, descriptions, timelines, pricing inputs, and the resulting AI-generated proposals.
  • Usage data — proposal counts, feature usage, plan/quota status, timestamps.
  • Subscription data — plan, currency (NGN or USD), payment provider (Paystack or Dodo Payments), provider customer/subscription identifiers, billing-period dates, status. We do not store full card numbers — those are handled directly by Paystack and Dodo Payments.
  • Technical data — IP address, device and browser information, log data, error reports, and basic analytics.
  • Support messages — anything you send us by email.

2. Why we use your data (purposes and legal basis)

  • To provide the Service — account creation, sign-in, generating proposals, enforcing free-tier quotas. Legal basis: performance of a contract.
  • To process payments and manage subscriptions — handled by our payment providers; we receive status updates. Legal basis: performance of a contract.
  • Security and fraud prevention — rate-limiting, abuse detection, log analysis. Legal basis: legitimate interests.
  • Product improvement and analytics — understanding which features are used. Legal basis: legitimate interests.
  • Customer support — responding to your questions. Legal basis: legitimate interests / performance of a contract.
  • Legal compliance — meeting our tax, accounting, and regulatory obligations. Legal basis: legal obligation.

3. AI processing

When you generate a proposal, your brief is sent to a third-party large language model provider via an AI gateway in order to produce the output. Inputs and outputs may be retained transiently by that provider for safety and abuse monitoring. We do not use your briefs to train AI models.

4. Who we share data with

  • Hosting and infrastructure providers — for example, our managed database and serverless runtime providers, to host and run the Service.
  • Payment providers / Merchant of Record — Dodo Payments (USD orders) acts as the Merchant of Record for sale of the product, subscription management, payments, tax compliance, and invoicing. Paystack processes NGN payments. They receive the data necessary to process your transaction.
  • AI model providers — to generate the proposal output, as described above.
  • Analytics — aggregated, privacy-respecting analytics on how the Service is used.
  • Professional advisers — accountants and lawyers, where strictly necessary.
  • Authorities — where required by law, a court order, or to protect rights, safety, or property.

We do not sell your personal data.

5. International transfers

Some of our service providers (including AI model providers and Dodo Payments) operate outside Nigeria, including in the United States and the European Economic Area. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

6. Data retention

We keep account and content data for as long as your account is active. If you delete your account, we remove or anonymise your personal data within a reasonable period thereafter, except where we are required to retain it (for example, billing and tax records). Backups are rotated and securely deleted on a regular schedule.

7. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate data;
  • request deletion ("right to be forgotten");
  • restrict or object to certain processing;
  • request portability of data you provided to us;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with your local data-protection authority (in Nigeria, the Nigeria Data Protection Commission).

We aim to respond to requests within one month. To exercise any of these rights, email info@expromedia.com.ng.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, role-based permissions for staff, and security logging. No method of transmission or storage is 100% secure, but we work to limit risk.

9. Cookies

We use a small number of essential cookies and similar storage to keep you signed in and remember your preferences. We may also use privacy-respecting analytics. We do not use advertising cookies. You can clear or block cookies in your browser, but the Service may not work fully without essential cookies.

10. Children

The Service is not directed to children under 18. We do not knowingly collect personal data from children.

11. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be announced through the Service or by email.

12. Contact

ExProMedia — privacy enquiries can be sent to info@expromedia.com.ng.