Privacy Policy

NigeriaTax Pro Limited is committed to protecting your privacy. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights. It applies to all users of the NigeriaTax Pro platform and is effective from 1 January 2026.

1. Who we are

NigeriaTax Pro Limited is incorporated in Nigeria. Our Data Protection Officer can be contacted at privacy@ngtaxpro.com. For urgent data breach notifications: security@ngtaxpro.com.

2. Data we collect

2.1 Account and identity data

• Full name, email address, job title, and phone number of Authorised Users
• Company name, CAC registration number, TIN, and business address of Tenants
• Client Entity information: legal names, TINs, CAC numbers, NIN (for individuals), entity type
• Payment information: billing address and transaction records (card details processed by our payment provider — not stored by us)
• Login credentials (passwords stored as one-way bcrypt hashes — we cannot read your password)

2.2 Tax data (processed on your behalf)

• Payroll records: employee names, salaries, deductions, PAYE computations
• Financial statements: profit and loss accounts, balance sheets, trial balances
• Tax returns: PAYE, CIT, VAT, petroleum royalty, WHT, and all other returns
• Accounting system data: transactions imported from QuickBooks, Sage, Zoho, Tally, SAP, Dynamics, NetSuite, or uploaded via CSV/Excel
• Production data (petroleum entities): volumes, benchmark prices, royalty computations
• NRS credentials: NRS SSO usernames and AES-256-GCM encrypted passwords in our credential vault

Tax Data belongs to you. We process it as a data processor acting on your instructions.

2.3 Usage and technical data

• IP addresses, browser type, device information
• Log data: pages visited, features used, API calls made
• Performance and error data for platform monitoring

3. How we use your data

• Creating and managing your account and workspace
• Processing tax computations and generating Rev360-ready output
• Managing return approval workflows
• Connecting to third-party accounting systems
• Sending return status notifications, due date reminders, and law update alerts
• Processing subscription payments and issuing invoices
• Diagnosing and fixing technical issues
• Complying with applicable Nigerian law

4. Legal basis for processing (NDPA 2023)

• Contract: processing necessary to perform our agreement with you
• Legitimate interests: usage analytics, fraud prevention, platform security
• Legal obligation: compliance with Nigerian law and regulatory requirements
• Consent: where expressly requested (e.g. marketing) — withdrawable at any time

5. Data sharing and third parties

We do not sell your data. We share only with:

• Cloud infrastructure provider (hosting — data centres in Nigeria or EU)
• Payment processor (billing only — no Tax Data shared)
• Email delivery service (notifications only — no Tax Data in emails)

Where you authorise Rev360 submission, we transmit Rev360-ready returns to the NRS using your stored NRS credentials. We may disclose data where required by Nigerian law.

6. International data transfers

Tax Data is processed primarily within Nigeria. Where EU cloud services are used, standard contractual clauses ensure adequate protection in compliance with NDPA requirements.

7. Data retention

8. Your rights under the NDPA 2023

You have the right to: access your personal data · rectification of inaccurate data · erasure (subject to legal retention requirements) · restriction of processing · data portability · object to processing · withdraw consent at any time.

To exercise any right, contact privacy@ngtaxpro.com. We will respond within 30 days.

9. Cookies

• Strictly necessary: session management, authentication, CSRF protection — cannot be disabled
• Functional: user preferences, remembered settings — can be disabled with reduced functionality
• Analytics: anonymised usage statistics — can be declined via cookie settings

We do not use advertising or tracking cookies.

10. Children's data

The Service is for business use by adults. We do not knowingly collect personal data from individuals under 18. Contact privacy@ngtaxpro.com if you believe a minor has provided data.

11. Changes to this policy

We will notify Tenant administrators of material changes 30 days before they take effect. Current version always at ngtaxpro.com/privacy.