Privacy Policy

Authxperts is the data controller for personal data processed through this website and our services. You can reach our privacy team at privacy@authxperts.com.ng.

• Account data: name, work email, company name, and a securely hashed password when you register.
• Enquiry & lead forms: name, email, phone (optional), company, selected services, budget and campaign details you submit.
• PR orders: company name, contact name and email, press-release headline, draft links and distribution preferences.
• Audit data: the website domains you submit for analysis and the resulting technical measurements (HTTP status, metadata, Lighthouse scores).
• Session data: an authentication cookie required to keep you signed in (see our Cookie Policy).

• Contract: to provide your account, run audits, fulfil PR orders and respond to enquiries you initiate.
• Legitimate interest: to operate, secure and improve our services, including internal lead scoring and analytics of our own records.
• Consent: for marketing communications — only where you have expressly opted in via an unticked checkbox. You may withdraw consent at any time.
• Legal obligation: order and invoice records retained for accounting and tax requirements.

We use the following processors under data-processing terms; each receives only the data needed for its function:

• Neon (PostgreSQL hosting, US) — application database storage.
• Vercel (hosting, US) — application delivery and infrastructure logs.
• Groq (US) — AI processing of audit findings and press-release drafting inputs.
• Google PageSpeed Insights (US) — technical analysis of domains you submit.
• Resend (US) — transactional and operations notification emails.

These transfers involve processing outside Nigeria and the EEA. We rely on the providers' standard contractual safeguards for such transfers.

• Account data — kept while your account is active; deleted or anonymised on account deletion.
• Enquiry/lead records — up to 24 months unless an engagement follows.
• Order and invoice records — retained as required by Nigerian tax and accounting law.
• Audit results — retained while your account is active; deleted with your account.

Under the NDPA 2023 and GDPR you may:

• Request access to, or a copy of, your personal data
• Request correction of inaccurate data
• Request erasure ("right to be forgotten") — available from your dashboard or by email
• Restrict or object to processing, including marketing
• Request data portability
• Withdraw consent at any time, without affecting prior processing

To exercise any right, email privacy@authxperts.com.ng. You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC) or your local EU/UK supervisory authority.

Passwords are stored only as salted hashes. Sessions use HTTP-only, secure, same-site cookies. All traffic is encrypted in transit via TLS. Access to production systems is limited to authorised personnel.

Our services are directed at businesses and are not intended for individuals under 18.

We may update this policy; material changes will be announced on this page with a revised date. Continued use after changes constitutes acceptance.