Privacy Policy

Effective date:

1. Introduction

Nexora Tech Ltd (RC 9475768) (“Nexora”, “we”, “us”, “our”) is a company registered in Nigeria with its office at 13 Raymond Ovietare Street, Oko Ope, Akute, Ogun State, Nigeria. We operate Ije, a platform that helps communities such as families, susu and ajo groups, cooperatives, churches, mosques, alumni groups, sports clubs, neighbourhoods and non-profits organise contributions, set goals and track progress transparently, available through www.getije.com and any related website, web app or mobile application (together, the “Services”).

This Privacy Policy explains how we collect, use, share, store and protect your personal data. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA), the NDPA General Application and Implementation Directive (GAID), and other applicable Nigerian laws. By using the Services or joining our waitlist, you acknowledge that you have read this Policy.

2. Who is responsible for your data

Nexora as controller. We decide how and why we use the personal data we collect for our own purposes. This includes account details, identity verification, payment and transaction records, fraud prevention and security, support, analytics and improving the Services, and meeting our legal obligations.

Nexora as a processor. When a Community Admin sets up a community and enters or uploads information about members (for example names, phone numbers, contribution amounts and dates), the community, acting through its Community Admin, decides what is entered and why. For that information, we act as a processor. We use it only to provide the Services and as set out in our Terms and Community Data Terms. If we use some of that information for one of our own purposes listed above, we are the controller for that purpose.

Community Admins. A Community Admin must have a lawful basis for adding someone’s information, must tell members what is recorded and who can see it, and must not enter more than the community needs.

If someone added you. If a Community Admin adds or invites you, we will send you a short notice with a link to this Policy the first time we contact you. You can also contact us or the Community Admin at any time about your information.

3. Personal data we collect

a. Information you give us

1. (i)

   Account and profile: name, email, phone number, password (stored in hashed form), profile photo (optional), role (Community Admin or member).

2. (ii)

   Community information: community name, purpose, contribution amount and schedule, goals, member lists, invite links, codes and QR codes.

3. (iii)

   Contribution records: amounts, dates, payment status, who has paid, balances, and progress towards goals.

4. (iv)

   Identity and verification information: where the law or our payment or verification partners require it, we or those partners may ask for your full name, date of birth, phone number and a government-issued ID number (such as your NIN or BVN). Verification is carried out by licensed verification providers. We keep only [the result of the check and a masked reference], and we do not keep your full ID number for longer than the check needs unless the law requires us to.

5. (v)

   Communications: messages you send to support, survey responses, and feedback.

6. (vi)

   Job applications: CV, contact details and employment history sent through our Careers page.

b. Information collected automatically

1. (i)

   Device and technical data: IP address, browser type, device model, operating system, language, time zone, crash logs.

2. (ii)

   Usage data: pages and screens viewed, features used, referring pages, dates and times of access.

3. (iii)

   Cookies and similar technologies (see Clause 9).

c. Information from third parties

1. (i)

   Payment providers and banks (transaction confirmations, payment status, masked card or account details).

2. (ii)

   Community Admins or other members who add or invite you.

3. (iii)

   Identity verification and fraud-prevention providers.

4. (iv)

   Social media platforms if you contact us through them.

d. Sensitive personal data

Some information on Ije can reveal sensitive personal data, in particular religious belief, for example where a community is a church or mosque, or where a contribution is labelled a tithe, zakat or offering. We do not ask members for sensitive data. We do not use it to profile you, target advertising, or for any purpose other than providing the Services. Where we process it as controller, we rely on your explicit consent, which you can withdraw at any time. Where a Community Admin records it in a community, the Community Admin is responsible for having a lawful basis. Please do not put sensitive details (such as health information or political opinion) in community names, descriptions, notes or contribution labels. We restrict access to this information to staff and providers who need it.

4. How and why we use your data (lawful basis)

Where we rely on consent, you can withdraw it at any time (see Clause 11). Withdrawal does not affect processing already done. Where we rely on legitimate interests, we balance them against your rights and freedoms.

We use automated tools to detect fraud and suspicious activity. If a tool flags your account or a payment, a member of our team reviews the flag before we suspend or close anything, unless we must act immediately to protect people or comply with the law. You can ask us to review any such decision at support@getije.com

5. Who we share your data with

1. (i)

   Other members of your community. Ije is built for transparency: members of a community can see information such as who has contributed, amounts, dues and progress. Community Admins can see and manage member details. Share only what you are comfortable with your community seeing.

2. (ii)

   Service providers (processors) who work for us under written agreements: cloud hosting and storage, payment processors and banks, communication tools (email, SMS, WhatsApp, push notifications), analytics, customer support, identity verification and security providers.

3. (iii)

   Professional advisers, such as lawyers, auditors and insurers, under confidentiality duties.

4. (iv)

   Regulators, courts and law enforcement where required by law, or to protect rights, safety and security.

5. (v)

   Business transfers. If Nexora is involved in a merger, acquisition, financing or sale of assets, personal data may be transferred, and we will notify you if your data becomes subject to a different privacy policy.

6. (vi)

   With your direction or consent, for any other purpose we tell you about at the time.

We require all processors to protect your data, use it only on our instructions, and meet NDPA standards.

6. International transfers

Some of our service providers (for example, cloud hosting, messaging and analytics providers) are based or store data outside Nigeria. We transfer personal data abroad only where the NDPA allows it: where the destination has been found to offer adequate protection, where we have put in place binding contractual or corporate safeguards, or in limited cases where an exception applies, such as your informed consent after we have explained the risks, or where the transfer is needed to perform a contract.

7. How long we keep your data

When data is no longer needed, we delete or anonymise it so it can no longer identify you. If the law or a legal claim requires us to keep something longer, we will keep only what is necessary

8. How we protect your data

We use appropriate technical and organisational measures, including encryption in transit and at rest where appropriate, access controls, staff confidentiality obligations and training, regular security reviews, secure vendor selection, and incident response procedures. No system is completely secure, so we cannot guarantee absolute security. Please keep your password and invite codes confidential.

If a personal data breach is likely to put your rights and freedoms at risk, we will notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of it. If the breach is likely to result in a high risk to you, we will tell you immediately. Our message will explain what happened, what data is affected, the likely consequences, what we are doing about it, and what you can do to protect yourself.

9. Cookies and similar technologies

We use cookies and similar tools to keep the Services working, remember your preferences, understand usage, and improve performance.

1. (i)

   Strictly necessary cookies (security, login, load balancing) are always on.

2. (ii)

   Analytics and performance cookies help us understand how the Services are used.

3. (iii)

   Marketing cookies, if used, are set only with your consent.

We set analytics and marketing cookies only after you accept them on our cookie banner. Strictly necessary cookies do not need your consent. You can change your choice at any time through the “Cookie settings” link in the footer, or through your browser settings. Blocking some cookies may affect how the Services work.

10. Children

The Services are for people aged 18 and over. You cannot create an account if you are under 18. Some communities, such as family groups, may need to record limited information about a child, such as a name and contribution status. Only a parent or legal guardian may enter a child’s information, and only where the community needs it. The Community Admin must have that parent’s or guardian’s consent. We do not use children’s data for marketing or profiling. If you believe a child’s information has been entered without proper consent, contact us at support@getije.com and we will act promptly.

11. Your rights

Under the NDPA, you have the right to:

1. 1.

   Be informed about how your data is used (this Policy).

2. 2.

   Access your personal data and receive a copy.

3. 3.

   Rectify inaccurate or incomplete data.

4. 4.

   Erase your data in certain circumstances.

5. 5.

   Restrict or object to processing, including direct marketing.

6. 6.

   Data portability: receive your data in a structured, commonly used, machine-readable format and have it transferred where feasible.

7. 7.

   Withdraw consent at any time.

8. 8.

   Not be subject to solely automated decisions with significant effects.

9. 9.

   Lodge a complaint with the Nigeria Data Protection Commission (www.ndpc.gov.ng).

We may need to verify your identity and will respond within one month (or the period the law requires). Some requests may be limited to where we must keep data by law or to protect legal claims. Unsubscribe from marketing at any time using the link in our emails.

How to use your rights.

Email support@getije.com or write to our Data Protection Officer at the address in Clause 15. If your request is about information a Community Admin entered, we may need to pass it to them or work with them to respond. We reply within one month. We do not charge a fee unless a request is clearly unfounded or excessive.

12. Leaving a community or closing your account.

If you leave a community or close your account, you will no longer have access to that community. Contribution and payment records that the community and Nexora must keep for accounting, tax, audit, dispute or legal reasons will remain. Wherever we can do so without making the community’s records inaccurate, we will replace your name and contact details with a reference such as “Former member”. We delete everything else we do not need to keep.

13. Third-party links and platforms

The Services may link to third-party sites (for example our WhatsApp channel, Instagram, X and LinkedIn pages). We do not control and are not responsible for their privacy practices; please read their policies.

14. Changes to this Policy

We may update this Policy from time to time. We will post the new version with an updated “Last updated” date. For material changes, we will tell you by email or in the Services at least 30 [thirty] days before they take effect. If we rely on your consent for a processing activity and we want to use your data in a new way, we will ask for your consent again first. If you do not agree with a change, you can close your account.

15. Contact us

For questions, requests or complaints about your personal data, you may contact us on , support@getije.com Address; 13 Raymond Ovietare Street, Oko Ope, Akute, Ogun State, Nigeria. We aim to reply within 7 days. If you want to use a right in Clause 11, please say so in your message.