Privacy Policy
Last Updated: August 2026 • Effective Version 1.2
1. Overview & Commitment to Data Protection
Verixa ID ("Verixa", "we", "us", or "our") provides business-to-business (B2B) identity, financial verification, and developer API aggregation infrastructure. We take data privacy and security with the utmost seriousness.
This Privacy Policy explains how personal and corporate data is collected, processed, encrypted, and safeguarded when businesses ("Customers", "Developers") access our APIs and management consoles.
Our operations adhere strictly to the Nigeria Data Protection Act (NDPA 2023) and international data protection standards.
2. Data Controller vs. Data Processor Role
- You (Our Customer/Client) act as the Data Controller for end-user identity queries submitted via our verification APIs (such as BVN, NIN, and bank account numbers). You warrant that you have obtained lawful consent from applicants prior to initiating verification.
- Verixa ID operates strictly as a Data Processor on your behalf, transmitting requests securely to authorized repositories and certified verification networks.
3. Information We Collect & Process
A. Customer Account Data
Corporate email addresses, business name, authorized administrator contact info, securely hashed credentials, and billing records for purchasing NGX credits.
B. Verification API Payloads
Bank Verification Numbers (BVN), National Identification Numbers (NIN), Nigerian Uniform Bank Account Numbers (NUBAN), and demographics submitted for authorized queries.
4. Security Architecture & Data Safeguards
- Zero Upstream Credential Exposure: Customers never receive direct credentials to upstream databases. All provider keys are securely stored server-side.
- Cryptographic Key Hashing: Customer API keys are cryptographically generated and hashed using industry-standard bcrypt. Raw secrets cannot be retrieved from our database after generation.
- Strict Encryption: All communication is enforced via TLS 1.3 encryption in transit, with AES-256 database encryption at rest.
- Zero Unauthorized Retention: Identity queries are processed strictly for verification fulfillment and audit logging with applicant consent.
5. Third-Party Upstream Providers
To complete identity and financial verifications, Verixa ID securely routes requests through authorized identity verification partners (e.g., licensed providers and certified payment switches like Paystack for dedicated virtual account funding).
We do not sell, rent, or trade personal data to third parties for marketing or advertising purposes.
6. Contact & Data Protection
For inquiries regarding privacy, compliance audits, or data rights under NDPA, reach out to our team: