Privacy Policy

We collect the information you give us through the forms on this website, we use it to evaluate your submission and to run our business, and we don’t sell it to anyone. This page explains the details in plain language. If anything is unclear, email us at hello@promoatcapital.com.

Promoat Investments Ltd (“we”, “us”, “our”), a company registered in Nigeria, is an investment firm that backs small and medium businesses in Nigeria and other frontier markets. We operate this website, promoatcapital.com, including The Drawbridge Grant application. For anything related to your personal data, contact hello@promoatcapital.com.

Information you give us. When you fill a form on this site — the founder form, the partner form, or a grant application — we collect what you type in. Depending on the form, that includes your name, email address, phone number, business name, CAC registration number, location, sector, business stage, revenue range, team size, whether you have a business bank account, your description of the business and your plans, and any links you share. If you email us, we keep the correspondence.

Information collected automatically. Like almost every website, our hosting provider records basic technical logs (such as your IP address, browser type, and pages visited) to serve the site and keep it secure. Our forms are protected by Google reCAPTCHA, which collects device and behaviour signals to tell people apart from bots; reCAPTCHA is governed by Google’s own privacy policy and terms.

We don’t run advertising trackers. We do measure how the site is used; see How we measure the site.

To see which pages help people and where the grant application form loses them, we count how the site is used: pages visited, buttons pressed, and which form fields people reach before they stop. We never record what you type into a form, and we do not record your screen.

This is linked to a random visitor number, not your name or email. When you apply for the grant and then open your application on Habaqa, that visit and your Habaqa account are joined, so we can see how applicants find their way to Habaqa. Habaqa is run by the same company and its own privacy policy explains how it measures its app.

When something on the site breaks, an error report (what broke and on which page, with names, emails and amounts removed) is sent to us so we can fix it. Error reports keep running even if you turn measuring off.

The tools. PostHog (usage) and Sentry (error reports), which store data primarily in the United States. Usage data is kept for up to seven years and error reports for up to 90 days.

Your choice. If you are in the UK, the European Union or the European Economic Area, we ask before measuring anything, and nothing is measured until you press Accept. Anyone can change their answer with Privacy choices at the foot of every page.

• To read and evaluate your submission or application. We’re open about this: every submission is read by our investment team, and we may contact you about the grant, about investment, or both.
• To run The Drawbridge Grant — shortlisting, interviews, verification (for example, confirming your CAC registration), paying out grants, and keeping records of each cohort.
• To respond to you and send you confirmations about things you submitted.
• To send occasional updates about our programs and products to people who have given us their email address; you can opt out of these any time by emailing us.
• To protect the site from spam, fraud, and abuse.
• To meet legal and regulatory obligations.

One thing to know in advance: we’re building a free platform for small businesses. Grant applicants will get an account on it, created from the details in their application, and it’s where applicants will be able to follow the progress of their application. When it launches, its own privacy terms will apply to what happens inside it, and we’ll point you to them at sign-up.

We use your information because you asked us to (by submitting a form), because we have a legitimate business interest in evaluating the businesses that apply to us, or because the law requires it.

We don’t sell your personal information, and we don’t share it with advertisers. We do use a small number of service providers to run the site, and your data passes through them:

• Vercel — hosts the website and serves it to you.
• Neon — the database where form submissions are stored (located in the United States).
• Resend — sends our notification and confirmation emails.
• Google reCAPTCHA — protects our forms from bots.
• PostHog, which measures how the site is used, and Sentry, which receives error reports (see How we measure the site).

Beyond that, we may share information with professional advisers (lawyers, accountants) under confidentiality, with authorities when the law requires it, or as part of a business transaction such as a merger — in which case this policy would still apply to your data.

Our service providers store data primarily in the United States. If you’re in Nigeria or elsewhere, that means your information is transferred internationally. We only use established providers with strong security practices, and we protect the data the same way wherever it sits.

We keep submissions for as long as we need them to evaluate your business, run the grant cohort you applied to, and maintain sensible business records. If you’d like your information deleted, email us — we’ll delete it unless we’re legally required to keep it.

Depending on where you live — including under the Nigeria Data Protection Act, 2023 — you have the right to:

• Ask what personal information we hold about you.
• Ask us to correct anything that’s wrong.
• Ask us to delete your information.
• Object to or limit how we use it.
• Withdraw consent you previously gave.
• Complain to your data protection authority — in Nigeria, the Nigeria Data Protection Commission.

To exercise any of these, email hello@promoatcapital.com. We’ll respond within a reasonable time, and we may ask you to confirm your identity first.

This site uses no advertising cookies. PostHog sets analytics cookies and browser storage to recognise a returning visitor; where we ask first, they are set only after you press Accept, and never if you decline. One cookie remembers your Privacy choices answer for 12 months. Google reCAPTCHA may set cookies and use similar technologies to do its job of telling people apart from bots.

Form submissions travel encrypted (HTTPS), our database is only accessible from our own server code, and access to submissions is limited to our team. No system is perfectly secure, but we take reasonable measures to protect what you share with us.

This website is for people running or backing businesses. It isn’t directed at anyone under 18, and we don’t knowingly collect information from them.

If we change this policy, we’ll update this page and the date at the top. A meaningful change to how we handle your data will be flagged more visibly than a quiet edit.

Questions, requests, or concerns: hello@promoatcapital.com.