Tax Nigeria Technologies Limited • NDPA 2023 Compliant

Privacy Policy & Data Protection Protocols

Statutory Privacy Statement pursuant to the Nigeria Data Protection Act (NDPA) 2023 • Last Updated: 2026

Our Data Privacy & AI Security Commitment

Tax Nigeria Technologies Limited is committed to the highest standards of data protection, algorithmic confidentiality, and financial privacy. We process personal and corporate financial data strictly in compliance with the Nigeria Data Protection Act (NDPA) 2023, the Cybercrimes Act, and international cloud security benchmarks.

1. SCOPE AND STATUTORY APPLICATION

This Privacy Policy applies to all natural persons and corporate entities accessing, subscribing to, or utilizing the cloud-hosted software, computational tax engines, conversational AI assistants, and APIs provided by Tax Nigeria Technologies Limited ("Company", "we", "us", or "our").

We operate both as a Data Controller for our direct subscribers and as a Data Processor when processing corporate payroll, employee schedules, or client records uploaded by authorized enterprise users.

2. CATEGORIES OF INFORMATION WE PROCESS

A. Identification & Account Data

Full name, corporate organization name, work email address, telephone number, authentication tokens, and encrypted password hashes.

B. Financial & Tax Computation Records (User Data)

Income figures, expense line items, payroll deductions, Bank Verification Numbers (BVN), National Identity Numbers (NIN), Tax Identification Numbers (TIN), assessment notices, and conversational tax queries submitted to AI models.

C. Telemetry, Security & Diagnostic Metadata

IP addresses, session identifiers, browser and device types, API latency logs, error telemetry, and token consumption metrics.

3. STRICT AI MODEL CONFIDENTIALITY & ZERO PUBLIC TRAINING

We Guarantee That Your Proprietary Financial Data Is Never Used to Train Public AI Models.

In accordance with Section 6.3 of our Terms of Service, the Company warrants that uploaded financial statements, corporate ledgers, employee records, and identified individual tax queries are processed in-memory solely to generate real-time computational answers. We DO NOT sell, license, or feed User Data to third-party foundational artificial intelligence models for public training or fine-tuning.

De-identified, aggregate statistical telemetry (e.g. calculation speed and system uptime) may be used internally solely for platform diagnostic optimization.

4. LEGAL BASIS FOR PROCESSING (NDPA 2023)

We process personal and corporate data strictly in accordance with lawful bases under the Nigeria Data Protection Act (NDPA) 2023:

Contractual Necessity: To provide tax calculations, filing calendars, AI assistance, and premium subscription management requested by you.
Legal & Statutory Compliance: To comply with statutory record-keeping and invoicing mandates under the CAMA 2020 and Value Added Tax Act.
Legitimate Interest: To safeguard the Platform against fraud, prompt injection attacks, API abuse, and cyber threats.
Explicit Consent: Where you opt in to receive marketing newsletters, policy updates, or product announcements.

5. CROSS-BORDER DATA TRANSFERS & HOSTING

Pursuant to Part V of the NDPA 2023, data packets and AI compute requests may be processed across high-security Tier-3 and Tier-4 cloud infrastructure situated within and outside Nigeria.

All international transfers are governed by standard contractual clauses, zero-trust network encryption (TLS 1.3 in transit and AES-256 at rest), and strict data residency assurances ensuring full equivalence with Nigerian data protection standards.

6. THIRD-PARTY DATA CONTROLLER RESPONSIBILITIES

If you upload or input third-party records (e.g. employee payroll schedules, client accounts, or contractor TINs), you represent and warrant that you are the lawful Data Controller and have procured all mandatory statutory consents and issued required privacy notices under Sections 24–26 of the NDPA 2023 prior to submitting such records to our Service.

7. YOUR STATUTORY PRIVACY RIGHTS

Under the NDPA 2023, you have the following enforceable rights:

Right of Access: Request confirmation and copies of your stored personal records.
Right to Rectification: Request correction of inaccurate, misleading, or outdated profile details.
Right to Erasure ("Right to be Forgotten"): Delete your account and request purge of stored conversation histories and profile records.
Right to Data Portability: Export conversation transcripts and computational reports in structured JSON/PDF formats.
Right to Object / Opt-Out: Withdraw consent for non-essential analytics or marketing communications at any time.

8. DATA RETENTION & SECURITY SAFEGUARDS

We retain account and transaction records for the duration of your active subscription and as required by statutory tax and corporate enactments. We enforce multi-factor authentication, row-level security (RLS), continuous vulnerability scanning, and encrypted session tokens to safeguard all stored records.

9. CONTACTING OUR DATA PROTECTION OFFICER (DPO)

To exercise any statutory rights, submit a data subject access request, or report a privacy concern, please contact our Data Protection Officer:

Data Protection Officer • Tax Nigeria Technologies Limited

Email: privacy@taxnigeria.com

Support & Compliance: legal@taxnigeria.com

Abuja, Federal Capital Territory, Nigeria