Docufy is operated by Innoedge Technologies Ltd, an independent private company. We are not a government agency. We process personal data in line with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act 2023.
We collect only what we need for the document you are filing: the identity information required by each agency portal, your payment instrument (tokenised — we never store raw card data), and contact details needed to communicate filing status.
We retain personal data for seven years from the date of the last related filing, then archive or delete per NDPR retention guidance. Backups are rotated on a 90-day cycle.
Files you upload and documents we deliver are encrypted at rest (AES-256-GCM), each with its own key. Every step of a filing is logged with its date and time, and sensitive admin actions are recorded in an audit log.
We use Google Analytics 4 to measure how Docufy is used. Until you choose on our cookie banner, Google receives cookieless pings about your visit. They set no cookies and store nothing on your device. If you accept, we allow analytics cookies. If you decline, all analytics requests stop on that page and on every later visit, and we remember your choice in your browser. We clean the page addresses we send: private links and tokens are removed, and share, sign-in and verify links are not measured at all.
You can exercise data-subject rights — access, correction, erasure, portability, objection — by emailing [email protected]. We respond within 72 hours.