Legal
Privacy Policy
Last updated 11 August 2026
Taxneti connects businesses and individuals in Nigeria with certified tax consultants. This policy explains what personal data we collect, why we hold it, who we share it with, and the rights you have over it under the Nigeria Data Protection Act 2023 (NDPA).
1. Who is responsible for your data
Taxneti is the data controller for the personal data described in this policy - we decide what is collected and why. You can reach us about anything in this policy at privacy@taxneti.com.
2. What we collect
We only collect what the platform needs to work. What that means depends on your account type.
Everyone
| Data | Why we need it |
|---|---|
| Full name | To identify you to the person on the other side of a consultation |
| Email address | Sign-in, account confirmation, password reset, and service notifications |
| Phone number | So a consultant can reach you about your request |
| State and city | Matching you with consultants near you |
| Password | Stored only as a secure hash - we never see or store your actual password |
Business accounts
| Data | Why we need it |
|---|---|
| Business name | Shown to consultants you contact |
| Business type | Matching you with consultants who handle your kind of entity |
| Contact person's name | So consultants know who they are speaking to |
Individual accounts
| Data | Why we need it |
|---|---|
| Employment status | Matching you with consultants suited to your situation |
| Primary tax concern | Helping consultants understand your needs before you speak |
Consultant accounts
| Data | Why we need it |
|---|---|
| Certifying body and certificate number | Verifying you are genuinely certified before you appear in search |
| Years of experience, specialisations, who you serve | Shown publicly on your profile so clients can assess fit |
| Headline, bio, availability, indicative pricing | Shown publicly, and only if you choose to provide them |
Created as you use the platform
- Consultation requests, including the service requested and the description you write
- Quotes and counter-offers exchanged between you and the other party
- Reviews and star ratings you leave or receive
- Reports you file about another user, and support messages you send us
- In-app notifications generated by the above
Please do not put sensitive documents in a request description. The description box is free text shared with the consultant you contact. Taxneti has no document vault - send statements, filings and identity documents directly to your consultant through a channel you both trust, not through this platform.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis under the NDPA |
|---|---|
| Creating and running your account | Performance of a contract with you |
| Passing your request to the consultant you chose | Performance of a contract with you |
| Service emails - new request, quote received, request declined, review requests | Performance of a contract with you |
| Verifying consultant certification | Legitimate interest in keeping the marketplace trustworthy |
| Reminding consultants to complete their profile | Legitimate interest in a useful marketplace |
| Investigating reports and abuse | Legitimate interest in user safety |
| Publishing reviews on consultant profiles | Legitimate interest in informed choice |
We do not sell your personal data, and we do not use it for advertising or automated decision-making that produces legal effects for you.
4. Who we share it with
Your data is shared in three narrow circumstances.
With the other party to a consultation
When you send a request, the consultant receives your name, phone number, preferred contact method, availability and the description you wrote. When a consultant quotes you, you see their name and profile. Neither side sees the other's email address through the platform.
Publicly
Verified consultant profiles are public - name, headline, bio, specialisations, location, years of experience, rating and reviews. Reviews are published with the reviewer's account type (business or individual) but not their name. Client accounts are never public.
With service providers who process data on our behalf
| Provider | What they handle |
|---|---|
| Supabase | Database and authentication - stores everything described above |
| Vercel | Hosting and delivery of the website |
| Resend | Sending transactional email |
| Only if you choose “Sign in with Google” |
These providers act on our instructions and may store or process data on servers outside Nigeria. Where that happens we rely on the transfer conditions permitted by the NDPA, including contractual safeguards with each provider.
We may also disclose data where we are legally required to, or to establish or defend a legal claim.
5. How long we keep it
- Account data - while your account is open, and up to 90 days after you close it.
- Consultation requests and quotes - up to 3 years after the consultation closes, so both sides have a record of what was agreed.
- Reviews - kept while the consultant's profile is live, as they inform other users' decisions.
- Reports and support messages - up to 3 years, to spot repeat patterns.
If you ask us to delete your account, we remove your personal data except where we must keep it to resolve a dispute or meet a legal obligation.
6. Your rights
Under the NDPA you have the right to:
- Access - get a copy of the personal data we hold about you
- Rectification - have inaccurate data corrected
- Erasure - ask us to delete your data, subject to the retention periods above
- Restriction - ask us to pause processing while a dispute is resolved
- Objection - object to processing based on legitimate interest
- Portability - receive your data in a structured, machine-readable format
- Withdraw consent - where processing relies on consent, withdraw it at any time
Email privacy@taxneti.com to exercise any of these. We respond within 30 days. Most profile details you can correct yourself from your dashboard at any time.
7. How we protect it
- All traffic is encrypted in transit over HTTPS
- Passwords are hashed by our authentication provider and are never visible to us
- Database access is restricted at row level, so one user's account cannot read another's
- Dashboard access is restricted by role, and every action is checked against your session on the server
No system is perfectly secure, but if a breach affects your rights we will notify you and the Nigeria Data Protection Commission as the NDPA requires.
8. Cookies
We use a small number of strictly necessary cookies to keep you signed in and to remember your “remember me” preference. We do not use advertising or third-party tracking cookies. Clearing them signs you out.
9. Children
Taxneti is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.
10. Changes to this policy
We may update this policy as the platform develops. The date at the top always reflects the current version, and we will notify registered users by email of any material change.
11. Complaints
If you are unhappy with how we have handled your data, contact us first at privacy@taxneti.com. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).