Privacy Policy

Last updated: March 7, 2026

1. Who We Are

NAIJATAXBUDDY NIG LTD ("we", "us", "our") is a company registered with the Corporate Affairs Commission of Nigeria (RC 9226042). Our registered address is Cybervill Estate, 27 Legacy St, Unit MT3A, Lekki Phase I, Lekki 106104, Lagos, Nigeria.

We operate the Taxblabla website, mobile application, and associated services to help Nigerian individuals and businesses manage their tax obligations.

2. Information We Collect

We collect the following categories of information to provide and improve our services:

• Account Information: Name, email address, phone number, and authentication credentials.
• Financial Data: Income records, expense transactions, tax calculations, payroll data, and related financial information you enter.
• Business Information: Company names, registration numbers, addresses, and employee data for businesses you register.
• Documents: Receipts, invoices, payslips, and other files you upload.
• Device Information: Device type, operating system, app version, and push notification tokens.
• Usage Data: How you interact with the app to help us improve user experience.

3. Lawful Basis for Processing

In accordance with the NDPA 2023, we process your personal data on the following lawful bases:

• Consent: You provide explicit consent when you create an account and accept our Terms of Service. You may withdraw consent at any time.
• Performance of a Contract: Processing is necessary to deliver the services you have subscribed to, including tax estimation, payroll processing, and document management.
• Legitimate Interest: We may process data for service improvement, security monitoring, and fraud prevention, provided this does not override your fundamental rights.
• Legal Obligation: We may process data where required by Nigerian law or regulatory authorities.

4. How We Use Your Information

We use your information to:

• Provide real-time tax calculations and financial summaries
• Process payroll and generate payslips
• Deliver notifications and reminders about tax deadlines
• Process email and WhatsApp-forwarded transaction data
• Improve our services and develop new features
• Provide customer support
• Comply with legal and regulatory requirements

5. AI & Automated Processing

Our Service uses artificial intelligence in limited, transparent ways:

• Email & Document Parsing: AI may be used to extract transaction details from forwarded emails, WhatsApp messages, and uploaded documents.
• Transaction Categorization: AI may suggest categories for your transactions based on patterns and keywords.
• No Automated Tax Decisions: AI is never used to calculate final tax amounts. All tax estimation logic uses deterministic rules based on Nigerian tax law.
• Human Override: All AI-generated suggestions require your confirmation before they affect your estimates or records.

Under the NDPA 2023, you have the right not to be subject to decisions based solely on automated processing. You may request human review of any AI-generated categorization by contacting us.

6. Data Security

We implement rigorous security measures to protect your data:

• Encryption at Rest: All files and sensitive data are encrypted using AES-256 with Google Cloud KMS envelope encryption. Each file receives a unique data encryption key (DEK).
• Encryption in Transit: All communications between the app and our servers use TLS 1.3.
• Access Controls: Strict role-based access controls limit who can access your data.
• Temporary Access: File downloads use 15-minute temporary URLs that expire automatically.
• PIN Protection: Sensitive operations like data deletion require PIN verification.
• Request Signing: API requests are signed with HMAC-SHA256 to prevent tampering and replay attacks.

7. Data Storage & Retention

Your data is stored on secure cloud infrastructure. We retain your data for as long as your account is active. If you request account deletion, we will permanently remove your data in accordance with our deletion policy.

Specific retention periods:

• Active Accounts: Data is retained for the lifetime of your account.
• Deleted Accounts: All personal data is permanently erased within 30 days of a deletion request, except where retention is required by law.
• Legal Holds: Where required by Nigerian law, certain records may be retained for the legally mandated period.

8. Data Sharing & Third-Party Disclosure

To provide our services and ensure the security of your financial data, NAIJATAXBUDDY NIG LTD engages trusted third-party service providers. We only share data with these processors to the extent necessary to operate the Taxblabla platform. We do not sell, trade, or rent your personal data.

8.1 Core Infrastructure Partners

We utilize world-class infrastructure to ensure your tax data remains confidential and available:

• Cloud Hosting: Our primary servers are hosted by global leaders in cloud infrastructure, ensuring rigorous physical and digital security protocols.
• Encryption & Key Management: We utilize Google Cloud KMS (Key Management Service) for "Envelope Encryption," ensuring that your most sensitive data is encrypted at rest using AES-256 bank-grade standards.
• Security & Traffic: We employ industry-standard web server configurations to manage and automate TLS 1.2 and 1.3 encryption for all data in transit between your device and our servers.

8.2 Marketing & Communication

• Service Notifications: We use automated communication tools to manage our interactions with you. This allows us to send you relevant tax updates, platform notifications, and support emails while keeping your contact information secure.

8.3 Plan Access

Eligible accounts may receive promotional lifetime access or other account-based feature access at no cost. Access is managed through account entitlements across the Taxblabla platform.

8.4 Legal Compliance & Protection

We do not voluntarily share with tax authorities, except when legally required or when you instruct us to.

We may disclose your information to other public authorities when required by Nigerian law or valid legal process.

All third-party service providers are contractually bound to protect your data and may only process it for the specific purposes outlined above.

9. International Data Transfers

By using our platform, you acknowledge that your data may be processed on servers located outside of Nigeria (such as in the United States or Europe). We ensure that all such transfers are governed by Data Processing Agreements (DPAs) that provide a level of protection equivalent to Nigerian data protection standards.

10. Your Rights Under NDPA 2023

Under the Nigeria Data Protection Act (NDPA) 2023, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Object to or restrict certain types of processing.
• Portability: Receive your data in a structured, machine-readable format.
• Withdraw Consent: Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Automated Decisions: Not be subject to decisions based solely on automated processing, and to request human review.

To exercise any of these rights, contact our Data Protection Officer at [email protected], or use the Delete My Data page. We will respond to your request within 30 days.

11. Privacy Promise

• Your financial data is PRIVATE and used solely for generating estimates for YOUR benefit.
• We do not voluntarily share with tax authorities, except when legally required or when you instruct us to.
• We do NOT share your data with employers, banks, credit bureaus, or any external parties without your explicit consent.
• We do NOT sell your personal data.
• You control your data. Delete your account anytime to remove all your information.

12. Cookies & Analytics

Our mobile application does not use cookies. Our website may use minimal analytics to understand visitor patterns. We do not use any third-party advertising trackers.

13. Children's Privacy

Taxblabla is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children. If we discover that we have inadvertently collected data from a child, we will promptly delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email. Your continued use of Taxblabla after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or your data, contact us:

• General Support: [email protected]
• Data Protection Officer: [email protected]
• Legal Inquiries: [email protected]
• Address: Cybervill Estate, 27 Legacy St, Unit MT3A, Lekki Phase I, Lekki 106104, Lagos, Nigeria