Docufy is operated by Innoedge Technologies Ltd. We process personal data under the Nigerian Data Protection Regulation (NDPR) and its implementing framework.
We collect only what we need for the document you are filing: the identity information required by each agency portal, your payment instrument (tokenised — we never store raw card data), and contact details needed to communicate filing status.
We retain personal data for seven years from the date of the last related filing, then archive or delete per NDPR retention guidance. Backups are rotated on a 90-day cycle.
Your data is envelope-encrypted at rest (AES-256-GCM, per-blob data keys wrapped by a master key). Personal IDs are hashed and salted. Every admin action touching your data is logged to an immutable audit trail.
You can exercise data-subject rights — access, correction, erasure, portability, objection — by emailing [email protected]. We respond within 72 hours.