Zexus Privacy Policy

Operated by Zexus Services Limited · Effective: August 7, 2026 · Last updated: August 13, 2026

Operated by Zexus Services Limited

Effective date: August 7, 2026
Last updated: August 13, 2026

This Privacy Policy explains how Zexus Services Limited collects, uses, stores, shares, and protects personal data when you use our websites, applications, marketplaces, products, and services.

It applies to:

zexusservices.com;
zexuspro.com;
zexusauto.com;
ZexusPro;
ZexusAuto;
related applications, websites, tools, forms, communications, and services operated by Zexus Services Limited.

In this Privacy Policy, "Zexus," "we," "us," or "our" means Zexus Services Limited.

"You" or "your" means any person whose personal data we process, including clients, Pros, buyers, Dealers, asset owners, inspectors, delivery providers, representatives, visitors, and other users.

Our principal business address is:

Suite 202, 45 Orominike Street, D/Line, Port Harcourt, Rivers State, Nigeria.

1. Our privacy responsibilities

Zexus Services Limited may act as a data controller when we determine why and how your personal data is processed.

We may also act as a data processor where we process data on behalf of a business, corporate customer, Pro, Dealer, or another organisation under documented instructions.

We process personal data in accordance with applicable Nigerian data-protection laws, regulations, guidelines, and lawful instructions from competent authorities.

This Privacy Policy does not replace any separate privacy notice provided for a particular product, transaction, verification process, payment provider, inspection service, or corporate customer.

2. Personal data we collect

The type of data we collect depends on how you use Zexus.

2.1 Identity and account information

We may collect:

Full name.
Username.
Profile photograph.
Date of birth.
Gender where relevant.
Nationality.
Government-issued identification details.
Residential address.
Business address.
Email address.
Phone number.
Login details.
Account preferences.
Profile information.
Communication preferences.

2.2 Verification and compliance information

Where required, we may collect:

National Identification Number information.
Bank Verification Number information.
Passport, driver's licence, voter's card, or other identification information.
Proof of address.
Selfies or facial-verification information.
Business registration documents.
CAC documents.
Memorandum and Articles of Association.
CAC status reports.
Tax Identification Number.
Director and shareholder information.
Beneficial-owner information.
Professional licences and certifications.
Dealer authorisations.
Mandates, MOUs, consignment agreements, or agency agreements.
Ownership, title, finance, lien, import, customs, or registration documents.
Source-of-funds or compliance information where required.

Some identity or verification information may be collected directly by an approved third-party verification provider on our behalf.

2.3 Payment and payout information

We may collect or receive:

Payment references.
Transaction amount and currency.
Payment status.
Payment method.
Bank name.
Account name.
Account number or tokenised payment details.
Payout information.
Refund information.
Chargeback information.
Transfer references.
Settlement information.
Billing information.

Where a third-party payment provider processes your card or payment details, we may not receive or store the full card number, PIN, or security code.

2.4 Marketplace information

Depending on your role, we may collect:

Service listings.
Asset listings.
Professional qualifications.
Business information.
Prices and commission information.
Availability.
Service areas.
Vehicle or asset details.
VIN, chassis, serial, registration, mileage, or operating-hour information.
Inspection reports.
Maintenance records.
Ownership and title documents.
Delivery or handover records.
Portfolio materials.
Photographs and videos.
Reviews and ratings.
Transaction notes.
Quotes and offers.
Milestone information.
Refund and dispute evidence.

2.5 Communications

We may collect and retain:

Messages sent through our platforms.
Emails and support requests.
Telephone or customer-service records where lawfully recorded.
Dispute correspondence.
Feedback.
Survey responses.
Communications with Pros, Dealers, buyers, clients, inspectors, and delivery providers.
Information submitted through forms or complaints.

2.6 Technical and usage information

When you use our websites or applications, we may collect:

IP address.
Device type.
Browser type.
Operating system.
Mobile-network information.
Approximate location.
Device identifiers.
Language and time-zone settings.
Pages and screens viewed.
Search activity.
Features used.
Clicks and interactions.
Login times.
Referral sources.
Error logs.
Security and authentication events.

2.7 Cookies and similar technologies

We may use cookies, pixels, software development kits, tags, local storage, and similar technologies to:

Keep you signed in.
Remember preferences.
Secure accounts.
Maintain transaction sessions.
Understand platform usage.
Measure performance.
Improve our services.
Detect fraud.
Deliver relevant communications or marketing where permitted.

Further information will be provided in our Cookie Policy.

3. How we collect personal data

We may collect personal data:

Directly from you.
When you create an account.
When you use or browse our platforms.
When you publish a listing.
When you make or receive a payment.
When you communicate with another user.
From a business or organisation you represent.
From a Pro, Dealer, buyer, client, inspector, or delivery provider.
From payment providers.
From identity and business-verification providers.
From fraud-prevention providers.
From inspection or document-verification providers.
From public registers and lawful public sources.
From regulators, courts, government authorities, or law-enforcement agencies.
From another user who submits information about a transaction or dispute.

You must have lawful authority before submitting another person's personal data to us.

4. Why we use personal data

We may use personal data to:

4.1 Provide and operate the services

Create and manage accounts.
Display profiles and listings.
Connect clients with Pros.
Connect buyers with Dealers.
Process bookings, offers, and transactions.
Facilitate communication.
Support inspections and delivery.
Provide customer service.
Maintain transaction records.
Operate and improve our websites and applications.

4.2 Verify users and prevent fraud

Verify identity and businesses.
Confirm Dealer authority.
Confirm professional information.
Detect fraud, impersonation, document falsification, and payment abuse.
Prevent money laundering and other unlawful activity.
Conduct risk assessments.
Protect users, funds, assets, and the platform.
Investigate suspicious behaviour.

4.3 Process payments and payouts

Initiate and confirm payments.
Process refunds.
Manage commissions.
Arrange payouts.
Reconcile transactions.
Handle chargebacks and reversals.
Communicate with payment providers and banks.
Comply with payment-provider requirements.

4.4 Manage disputes and complaints

Investigate complaints.
Review messages, listings, documents, and transaction evidence.
Pause or release payments where permitted.
Assess refund requests.
Manage chargebacks.
Resolve disputes.
Maintain records of decisions and outcomes.

4.5 Communicate with you

Send service notifications.
Send verification requests.
Provide account and security alerts.
Send transaction and payout updates.
Respond to enquiries.
Send policy updates.
Send marketing communications where permitted and where you have not opted out.

4.6 Comply with legal obligations

Respond to lawful requests.
Comply with court orders and regulatory requirements.
Maintain financial and transaction records.
Meet tax, accounting, audit, and reporting obligations.
Prevent and investigate criminal conduct.
Protect legal rights and interests.

4.7 Improve and secure the services

Analyse platform use.
Test features.
Identify technical problems.
Monitor performance.
Improve search and recommendations.
Conduct research and analytics.
Train support and fraud-prevention systems where permitted.
Maintain cybersecurity and business continuity.

5. Legal grounds for processing

Depending on the circumstances, we may process personal data because:

You have given consent.
Processing is necessary to provide a service you requested.
Processing is necessary to perform or take steps toward a contract.
Processing is necessary to comply with a legal obligation.
Processing is necessary to protect vital interests.
Processing is necessary for a legitimate interest, provided that the interest does not override your rights.
Processing is necessary to establish, exercise, or defend legal claims.
Processing is authorised or required by applicable law.

Where we rely on consent, you may withdraw consent at any time. Withdrawal does not affect processing that occurred lawfully before withdrawal or processing that can continue on another lawful basis.

6. Verification and third-party providers

We may use third-party service providers for:

Identity verification.
Business and KYB verification.
Payment processing.
Settlement and payouts.
Fraud prevention.
Hosting and cloud storage.
Email, SMS, and messaging.
Analytics.
Customer support.
Inspection.
Document verification.
Delivery and logistics.
Security and infrastructure.

These providers may process personal data on our behalf or independently under their own privacy notices.

Possible providers may include Paystack, Smile ID, Prembly, banks, escrow providers, payment processors, inspection partners, logistics providers, and other providers selected by Zexus.

We will take reasonable steps to require relevant providers to protect personal data and process it only for authorised purposes.

We may share personal data where reasonably necessary with:

7.1 Other marketplace users

We may share relevant information with a client, Pro, buyer, Dealer, inspector, delivery provider, or other transaction participant.

We will try to limit the information shared to what is reasonably necessary for the transaction.

For example:

A Pro may receive information needed to perform a service.
A client may receive relevant Pro profile and service information.
A Dealer may receive information needed to complete an asset transaction.
A buyer may receive Dealer, asset, inspection, and transaction information.
A delivery provider may receive information needed to complete delivery.

7.2 Payment and financial-service providers

We may share personal and transaction information with:

Banks.
Payment processors.
Payment gateways.
Escrow or conditional-payment providers.
Transfer and payout providers.
Fraud-prevention providers.
Card schemes or payment networks.

7.3 Verification and compliance providers

We may share information with:

Identity-verification providers.
Business-verification providers.
KYC and KYB providers.
Fraud-prevention providers.
Sanctions-screening providers.
Document-verification providers.

7.4 Professional advisers and service providers

We may share information with:

Lawyers.
Accountants.
Auditors.
Insurers.
Inspectors.
Delivery providers.
Technology providers.
Customer-support providers.
Consultants.
Contractors.

7.5 Authorities and legal recipients

We may disclose personal data to:

Courts.
Regulators.
Government agencies.
Law-enforcement bodies.
Tax authorities.
Payment or financial regulators.
Dispute-resolution bodies.
Professional advisers.
Persons involved in a legal claim.

We may disclose information where we reasonably believe it is necessary to comply with law, protect users, investigate fraud, prevent harm, or protect Zexus's rights and property.

7.6 Corporate transactions

Personal data may be shared with prospective or actual buyers, investors, lenders, advisers, affiliates, or successors in connection with:

A merger.
Acquisition.
Investment.
Restructuring.
Sale of assets.
Transfer of a product or business.
Insolvency or similar proceeding.

8. Public profiles and user visibility

Some information may be visible to other users or the public, depending on the product and your settings.

This may include:

Display name or business name.
Profile photograph.
Service or asset listings.
Business location or service area.
Qualifications and experience.
Reviews and ratings.
Listing photographs and videos.
Availability.
Transaction-related information.
Verification status or badge.

Do not publish personal information that you do not want other users to see.

Zexus may remove, restrict, or modify public content where reasonably necessary for safety, privacy, legal compliance, or platform integrity.

9. International data transfers

Some of our providers or service partners may process personal data outside Nigeria.

Where personal data is transferred internationally, we will take reasonable steps to ensure that:

The transfer has a lawful basis.
Appropriate safeguards are used where required.
The recipient protects the information adequately.
The transfer is limited to the relevant purpose.
Users receive required information about the transfer.

International users may also be subject to the privacy laws of the country where they live or access Zexus.

10. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including:

Providing services.
Maintaining account and transaction records.
Managing disputes.
Preventing fraud.
Processing refunds and chargebacks.
Meeting legal, accounting, tax, regulatory, and reporting obligations.
Establishing, exercising, or defending legal claims.
Maintaining security and audit records.

Retention periods may depend on:

The type of information.
The nature of the transaction.
Legal requirements.
Payment-provider requirements.
Dispute or chargeback periods.
Fraud and security needs.
Whether you continue to use the services.

When information is no longer required, we may delete, anonymise, or securely dispose of it.

Some information may remain in backups or records for a reasonable period after deletion.

11. Data security

We use reasonable technical and organisational measures designed to protect personal data against:

Unauthorised access.
Loss.
Theft.
Misuse.
Alteration.
Disclosure.
Destruction.
Accidental damage.

Measures may include:

Access controls.
Authentication.
Encryption where appropriate.
Secure hosting.
Logging and monitoring.
Staff and contractor access restrictions.
Vendor controls.
Backups.
Incident-response procedures.
Fraud monitoring.
Security testing where appropriate.

No method of transmission, storage, or electronic security is completely risk-free.

You are responsible for:

Keeping your login credentials confidential.
Using a secure device.
Logging out where appropriate.
Not sharing account access.
Reporting suspected unauthorised activity promptly.

12. Data breaches and security incidents

If we become aware of a personal-data breach, we will assess the incident and take reasonable steps to:

Contain the incident.
Investigate the cause.
Restore secure operations.
Preserve relevant evidence.
Notify relevant authorities where required.
Notify affected persons where required or appropriate.
Take steps to reduce potential harm.

You should notify us promptly if you suspect that your account or personal information has been compromised.

13. Your data-protection rights

Subject to applicable law and reasonable verification, you may have the right to:

Know whether we process your personal data.
Request access to personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of personal data in appropriate circumstances.
Request restriction of processing.
Object to certain processing.
Withdraw consent where processing relies on consent.
Request portability of certain data.
Ask about the use of automated decision-making or profiling.
Complain about our handling of personal data.
Request information about relevant data sharing or international transfers.

Some rights are not absolute. We may retain or continue processing information where required for legal, security, fraud-prevention, payment, dispute, accounting, or other lawful purposes.

To exercise a right, contact:

Privacy email: [email protected]

We may request information needed to verify your identity and protect personal data from unauthorised disclosure.

We aim to respond within the period required by applicable law or within a reasonable period where no specific period applies.

14. Marketing communications

We may send promotional messages about:

Zexus services.
New features.
Marketplace opportunities.
Offers.
Events.
Surveys.
Products or services of selected partners where permitted.

You may unsubscribe from promotional communications by:

Using the unsubscribe link.
Changing account preferences.
Contacting us.
Following the instructions in the message.

You may continue to receive essential service, security, transaction, legal, payment, and account communications.

15. Cookies

We may use cookies and similar technologies to:

Operate the websites.
Maintain sessions.
Remember preferences.
Secure accounts.
Measure traffic.
Understand user behaviour.
Improve functionality.
Detect fraud.
Support marketing where permitted.

You may control cookies through your browser or device settings. Some features may not work correctly if essential cookies are disabled.

Further information will be provided in the Zexus Cookie Policy.

16. Children's data

Zexus services are intended for people aged 18 and above.

We do not knowingly invite children to create accounts or submit personal data. If you believe a child has provided personal data to us, contact:

[email protected]

Where appropriate, we will take reasonable steps to investigate and remove the information.

17. Sensitive and high-risk information

Some information processed by Zexus or its providers may be sensitive or create heightened privacy risks, including:

Government identification.
Biometric verification information.
Financial or payout information.
Identity and business documents.
Location information.
Fraud and risk indicators.
Information contained in disputes or complaints.

We will process such information only where reasonably necessary, lawfully permitted, and subject to appropriate safeguards.

You should not upload sensitive personal information that is not relevant to the transaction or verification request.

18. Third-party websites and services

Zexus may contain links, integrations, payment options, advertisements, or services operated by third parties.

A third party's website, platform, or service is governed by its own terms and privacy policy.

Zexus is not responsible for the privacy, security, content, or practices of an external service that we do not control.

19. Business and transaction data

Where you use Zexus for business or commercial purposes, you may provide personal data relating to:

Directors.
Shareholders.
Employees.
Agents.
Beneficial owners.
Customers.
Asset owners.
Contractors.
Representatives.

You confirm that you have a lawful basis and appropriate authority to provide that information to Zexus.

Where required, you must provide privacy notices to the relevant individuals.

20. Changes to this Privacy Policy

We may update this Privacy Policy to reflect:

Changes in our services.
Changes in data processing.
Changes in technology.
Changes in third-party providers.
Legal or regulatory requirements.
Security improvements.

We may notify you by publishing the updated Policy, sending an account notification, or using another appropriate method.

The updated Policy will state its effective date.

21. Privacy complaints

If you have a privacy question, request, or complaint, contact: