Privacy Policy

TaxTech NG is a digital tax-filing assistant built to align with Nigeria's 2026 National Revenue Service (NRS) rules and complies with the Nigeria Data Protection Regulation (NDPR). We are committed to protecting your personal information and ensuring transparency in how we collect, use, and safeguard your data.

This Privacy Policy explains what data is collected, how BVN/TIN is handled, how identity is verified, how filing information is stored, and your rights under NDPR.

1. Information We Collect

1.1 Personal Information

• Full name
• Email address
• Phone number
• Date of birth
• Residential address
• State of residence

1.2 Identity Verification Information

• Bank Verification Number (BVN) - hashed and masked only, never stored in plaintext
• Tax Identification Number (TIN) - validated and stored as a tokenized reference, not in raw form
• Temporary TIN for users without TIN/BVN
• Informal filer temporary ID for informal sector workers

1.3 Tax Filing Information

• Income details from all sources
• Allowable deductions claimed
• Relief applications
• Filing category (Formal or Informal)
• Payment method selected
• Receipt metadata and transaction references

1.4 Device & Usage Data

• Device type and operating system
• Browser type and version
• IP address (for security and fraud prevention)
• Login timestamps and session duration

2. How We Use Your Information

We use the information we collect for the following purposes:

• Identity validation and verification against NRS records
• Computing NRS-aligned taxes based on 2026 reform structures
• Generating accurate filing summaries and tax calculations
• Producing verifiable tax receipts with unique reference numbers
• Fraud prevention and security monitoring
• Communication regarding your filing status and updates
• Platform analytics in aggregate form only (no individual tracking)

TaxTech NG NEVER sells personal data to third parties.

3. How BVN & TIN Are Protected

We implement the highest standards of security for sensitive identity information:

• BVN Protection: Your BVN is never stored in plaintext. It is immediately hashed and masked upon collection, making it irreversible and unreadable.
• TIN Handling: Your TIN is validated against NRS records and stored only as a tokenized reference, not in raw form.
• Informal Filer Protection: Informal sector workers receive a Temporary ID, eliminating the need for raw BVN storage.
• Bank-Level Encryption: All sensitive data is encrypted using AES-256 encryption, meeting international banking security standards.

4. Data Storage & Security

TaxTech NG employs comprehensive security measures to protect your data:

• Storage Location: All data is stored on AWS Africa (Cape Town) infrastructure within Nigerian data residency requirements.
• Access Control: Role-based access control (RBAC) ensures only authorized personnel can access specific data categories.
• Transport Security: All data transmission uses TLS 1.2+ encryption protocols.
• Encryption at Rest: Data stored on our servers is encrypted using AES-256 encryption.
• Monitoring: Regular security audits, penetration testing, and continuous monitoring logs ensure ongoing protection.

5. Data Sharing

We do NOT share your personal data with third parties except in the following limited circumstances:

• Payment Processors: Paystack and Flutterwave for online payment processing (they receive only payment-related information, not full tax details)
• Offline Payment Agents: Moniepoint, Paga, and OPay for cash payment verification (they receive only payment reference codes)
• Regulatory Authorities: When legally required by NRS, NDPR enforcement agencies, or court orders

We do not engage in third-party marketing use of your data, and we do not transfer data abroad without proper legal safeguards and your explicit consent.

6. Your Rights Under NDPR

As a Nigerian data subject, you have the following rights:

• Right to Access: Request a copy of all personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Withdraw Consent: Withdraw your consent for data processing at any time.
• Right to Request Deletion: Request deletion of your data, subject to tax law retention requirements (NRS may require us to retain certain tax records for compliance purposes).
• Right to File a Complaint: Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been violated.

To exercise any of these rights, contact us at privacy@taxtechng.com.

7. Children's Privacy

TaxTech NG is intended for use by adults aged 18 years and above only. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected data from someone under 18, we will take immediate steps to delete such information.

8. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Effective Date" at the top of this page. Continued use of TaxTech NG after such changes constitutes acceptance of the updated Privacy Policy.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: