Privacy Policy

1. Introduction

NubixVerify ("we", "us", "our", "the Platform") operates as a secure identity verification service. This Privacy Policy describes our practices for collecting, using, and protecting information you provide to us when you use our Platform, create an account, perform identity verification lookups, or interact with our services in any way. Please read this policy carefully. If you do not agree with our practices, do not use the Platform.

2. What Information We Collect

2.1 Information You Provide Directly:

• Account Registration: When you create an account, we collect your full name, email address, phone number, and a secure password.
• Payment Information: To fund your wallet, we collect billing details and payment method information. This is processed securely through our payment partner (Paystack) and is never stored on our servers in full.
• Identity Data: When you submit a verification request, you or your organization provides the NIN, BVN, or phone number being verified. This data is transmitted securely to our licensed verification partners and processed strictly for that lookup.
• Communication: When you contact support, we collect your messages, inquiries, and any supporting documents you share.

2.2 Information Collected Automatically:

• Usage Data: We log your IP address, browser type, device type, operating system, referring website, and pages visited.
• Cookies & Tracking: We use session cookies to keep you logged in and analytics cookies (via industry-standard tools) to understand how the Platform is used.
• Transactional Data: We record all verification requests, their timestamps, results, and fees charged to your account for billing and fraud prevention.

3. Legal Basis for Processing

We process your personal information under the following legal bases:

• Contract Performance: To create and manage your account, process payments, and deliver verification services.
• Legal Compliance: To comply with Nigerian law, including the NDPA 2023, anti-money-laundering regulations, and tax obligations.
• Legitimate Business Interest: To prevent fraud, maintain platform security, improve services, and analyze user behavior.
• Your Consent: For marketing communications and optional analytics, we seek your express consent.

4. How We Use Your Information

We use the information we collect to:

• Create, manage, and authenticate your account
• Process wallet funding and charge verification fees
• Execute identity verification requests and deliver results
• Generate and deliver your verification slips and reports
• Detect and prevent fraud, unauthorized access, and misuse
• Respond to your inquiries and provide customer support
• Send transactional emails (confirmations, receipts, alerts)
• Analyze platform usage to improve services and user experience
• Comply with legal, regulatory, and law-enforcement requests
• Enforce our Terms & Conditions and other policies

5. Who We Share Your Data With

5.1 Verification Partners: To perform identity verification lookups, we share only the specific NIN, BVN, or phone number being verified with our licensed third-party identity verification partners, who process this data solely to return the verification result to us. We do not disclose your account details, email address, or other personal information to these partners beyond what is strictly necessary to complete the verification. For confidentiality and competitive reasons, we do not publicly name our verification partners; however, this information is available to the Nigeria Data Protection Commission upon lawful request, and to you upon a formal data subject access request where applicable law requires disclosure.

5.2 Payment Processors: Paystack and other payment processors receive your payment information to process wallet funding. They operate under their own privacy policies.

5.3 Service Providers: We may share limited information with third-party service providers who assist with hosting, analytics, customer support, and security — all bound by strict confidentiality agreements.

5.4 Legal Compliance: We may disclose information if required by law, court order, government request, or to protect the legal rights, safety, and security of NubixVerify, our users, and the public.

5.5 No Sale of Data: We do not sell, trade, or rent your personal information to third parties for marketing purposes.

6. Data Security

We implement industry-leading security measures to protect your information:

• Encryption: All data in transit is protected by TLS 1.2+ encryption. Sensitive data at rest is encrypted using AES-256.
• Secure Authentication: We use hashed passwords, multi-factor authentication options, and secure session management.
• Access Control: Only authorized personnel can access personal data, and access is logged and monitored.
• Regular Audits: We conduct regular security assessments and penetration testing.
• Compliance: Our infrastructure meets international security standards and complies with the NDPA 2023.

However, no system is entirely secure. While we work hard to protect your information, we cannot guarantee absolute security. You use the Platform at your own risk.

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained as long as your account is active, plus 3 years after closure for legal compliance.
• Transaction History: Retained for 5 years to meet tax and anti-fraud requirements.
• Verification Results: Retained for 3 years to support disputes and compliance audits.
• Support Tickets: Retained for 2 years after resolution.

After the retention period, we securely delete or anonymize your information unless legal obligations require longer retention.

8. Your Rights Under the NDPA 2023

Under the Nigeria Data Protection Act 2023, you have the following rights:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete information.
• Right to Erasure: You can request deletion of your data in certain circumstances (e.g., if no longer necessary for the purpose collected).
• Right to Restrict Processing: You can limit how we use your information in certain situations.
• Right to Data Portability: You can request your data in a structured, portable format.
• Right to Object: You can object to processing for marketing, profiling, or other purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time.

To exercise any of these rights, contact us using the details in Section 11 below.

9. International Data Transfers

Your information is primarily stored and processed in Nigeria. If we transfer data outside Nigeria (e.g., to cloud service providers), we ensure adequate safeguards are in place, including standard contractual clauses and data protection agreements that meet NDPA requirements.

10. Third-Party Links

Our Platform may contain links to third-party websites (e.g., NIMC's official site, payment processors). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any information to them.

11. Contact Us & Data Subject Requests

If you have questions about this Privacy Policy, wish to exercise your rights under the NDPA 2023, or suspect a data breach, contact us:

• WhatsApp Support: 08085693977
• Email: Support through your dashboard
• Website: www.nubixverify.com.ng

We will respond to data subject access requests within 30 days in compliance with the NDPA 2023.

12. Complaint Rights

If you believe we have violated your privacy rights under the NDPA 2023, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, law, or other factors. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, if necessary, by email or prominent notice on the Platform. Your continued use of the Platform after changes constitutes acceptance of the revised Privacy Policy.