NexaaSocial Privacy Policy
For the purposes of this privacy policy, the following terms shall have the meanings attributed below:
NexaaSocial: A tool for managing accounts and advertising campaigns on social networks, offering various features and services based on the subscribed Plan, accessible via https://app.nexaasocial.com/ and/or the NexaaSocial iOS or Android applications.
Nyx Wave Limited: The owner company of NexaaSocial, with its registered office at Lagos, Nigeria, and registered with the Corporate Affairs Commission (CAC) under 7893343. Hereinafter referred to as NyxWave Limited.
Administrator: A professional or company (e.g., Community Managers, Social Media Managers, advertising or digital marketing agencies) managing third-party or own social media accounts using NexaaSocial.
Brand: A natural or legal person who hires the Administrator’s services for managing their social media accounts through NexaaSocial.
NexaaSocial www.nexaasocial.com
NexaaSocial www.app.nexaasocial.com
1. Information about the Personal Data Controller
If you register as an Administrator to manage social media accounts for Brands or provide personal data directly, the data controller is NyxWave Limited, registered at [Insert Address], Lagos, Nigeria, with CAC registration [Insert Registration Number].
Contact NyxWave Limited at help@nexaasocial.com. The Data Protection Officer can be reached at dpd@nexaasocial.com.
2. Processing of Personal Data
As the Data Controller, NyxWave Limited processes the following data:
2.1. Upon Registration as Administrator
Email Registration: Your email and an encrypted password as access credentials, with a verification email sent.
Social Login: Registration via social media provides your email, profile picture, name, and a Unique Identifier. Permissions vary by platform.
Paid Services: Name, surname, and payment method details.
2.2. Information Requests
Name, email, and telephone number for responding to inquiries.
2.3. Blog Comments
Name and email (website optional) to moderate and publish comments (email not published).
2.4. Webinar Registration
Name and email for registration management.
2.5. Affiliate Program Participation
Uses registration data and payment details for managing affiliate status.
3. Purpose of Processing and Legal Basis
3.1. Administrator Data
Purpose: Enable service provision, send notifications, manage billing/payments, and (with consent) send commercial communications.
Legal Basis: Contract execution for service, billing, and notifications; legitimate interest for marketing (opt-out available).
3.2. Contact Data
Purpose: Respond to inquiries based on legitimate interest.
Legal Basis: Consent for commercial communications (via checkbox).
3.3. Blog Comment Data
Purpose: Moderate and publish comments.
Legal Basis: Legitimate interest.
3.4. Webinar Data
Purpose: Manage registration; send commercial communications with consent.
Legal Basis: Legitimate interest; consent for marketing.
3.5. Affiliate Program Data
Purpose: Manage affiliate status.
Legal Basis: Contract execution.
4. Data Retention Period
Data is retained as long as mutually beneficial and for the period liabilities may arise (e.g., 6 years for accounting per Nigerian law, 5 years for civil actions, 4 years for tax purposes). Data is pseudonymized or destroyed when no longer needed.
5. Recipients
Data may be shared within the NyxWave Limited group for coordination, marketing, and reporting, with safeguards against unauthorized access. No data is shared with third parties unless legally required. Data processors (e.g., for fraud prevention, CRM) operate under data processing agreements.
6. International Transfers
NyxWave Limited stores data on servers within Nigeria and does not perform international transfers.
7. Rights
You may exercise the following rights:
- Revoke consent.
- Access, rectify, or delete your data.
- Request data processing limitation or portability.
- Object to processing (except for legitimate claims).
Exercise rights by contacting help@nexaasocial.com or dpd@nexaasocial.com with ID proof. File complaints with the Nigeria Data Protection Commission (NDPC) at https://ndpc.gov.ng/.
8. Security
NyxWave Limited employs technical and organizational measures to protect data against alteration, loss, or unauthorized access, though absolute security cannot be guaranteed.
9. Updating Personal Data
Update data via your profile or by contacting NyxWave Limited.
10. Confidentiality
Data is handled with strict confidentiality by all involved personnel.
11. Cookies
NexaaSocial’s app version uses only technical cookies for service delivery. The website may use cookies per the Cookies Policy (to be provided). Consent will be sought for non-essential cookies.
12. Data Processing as a Data Processor
As an Administrator, you are the Data Controller for Brand data, and NyxWave Limited acts as Data Processor.
12.1. Purpose
Process Brand contact data (e.g., profiles, messages) for account management and advertising.
12.2. Affected Information
Public profile data and direct messages from Brand social accounts.
12.3. Duration
Data access lasts while the service is active; data is deleted post-termination.
12.4. Obligations of NyxWave Limited
Use data solely for contracted services. Follow Administrator instructions. Maintain processing records and confidentiality. Notify breaches within 72 hours. Support rights requests and audits.
12.5. Obligations of the Administrator
Provide necessary data. Ensure GDPR/Nigerian DPA compliance. Supervise processing.
Updated: July 08, 2025