Privacy Policy

1. Who We Are

[Nexxos HQ Ltd] is the data controller responsible for your personal data. We are registered at [Company Address, Lagos, Nigeria]. If you have questions about how we handle your data, please contact our team at nexxoshq@gmail.com.

2. Information We Collect

We collect information you provide directly and information generated through your use of the Service:

• Account information: name, email address, job title, company name
• Workspace data: tasks, attendance records, messages, payslips, documents
• Payment information: billing details (processed securely by our payment provider)
• Usage data: log files, IP addresses, browser type, pages visited, time spent
• Device information: operating system, device identifiers
• Communications: any messages sent to our support team

We do not intentionally collect sensitive personal data (such as health information or biometric data) unless you explicitly provide it as part of your workspace content.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Process transactions and send billing communications
• Respond to customer support requests
• Send product updates, security alerts, and administrative messages
• Analyse usage trends to improve features and user experience
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing, we rely on the following:

• Contract performance: Processing necessary to deliver the Service you signed up for
• Legitimate interests: Improving our product, preventing fraud, and ensuring security
• Legal obligation: Complying with applicable laws and regulations
• Consent: For optional communications such as marketing emails (which you may withdraw at any time)

5. Sharing Your Information

We do not sell your personal data. We may share it in the following circumstances:

• Service providers: Third-party vendors who help us operate the Service (e.g. hosting, payment processing, email delivery) under appropriate data processing agreements
• Workspace administrators: Your workspace admin can see activity data for members within their workspace
• Legal compliance: When required by law, court order, or to protect the safety of our users
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred with appropriate notice

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Workspace data is retained for the duration of your subscription. After account cancellation or termination, we retain data for up to 90 days to allow for reactivation and to fulfil legal obligations, after which it is securely deleted or anonymised. You may request earlier deletion as described in Section 7.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access the personal data we hold about you
• Right to correct inaccurate or incomplete data
• Right to request deletion of your data ("right to be forgotten")
• Right to restrict or object to certain types of processing
• Right to data portability (receive your data in a machine-readable format)
• Right to withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at nexxoshq@gmail.com. We will respond within 30 days. We may need to verify your identity before processing your request.

8. Cookies

We use essential cookies to keep the Service functioning. We do not use tracking or advertising cookies. For full details of the cookies we use, see our Cookie Policy. You can manage your cookie preferences at any time using the banner at the bottom of any public page.

9. International Transfers

Nexxos HQ is operated from [Nigeria]. If you access the Service from outside Nigeria, your data may be transferred to and processed in Nigeria or other countries where our service providers operate. We take steps to ensure that any such transfers comply with applicable data protection laws and that your data is afforded an adequate level of protection.

10. Security

We implement industry-standard technical and organisational security measures to protect your data, including encryption in transit (TLS), encrypted storage, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure. If you discover a security vulnerability, please disclose it responsibly by contacting nexxoshq@gmail.com.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: