Privacy & Cookies Policy
Last updated: July 2026
What We Don't Do
- Nexo does not sell user data to any third party, ever.
- Nexo does not share a buyer's contact details with a seller beyond what's needed to fulfill an order (delivery address, phone number for delivery coordination).
- Device fingerprinting and fraud scoring are used only for fraud prevention and the ban system never for advertising or profiling.
- In the Nex Token referral system, a referred user's identity is never shown to the person who referred them only the fact that a reward was triggered.
What We Collect
From every user
Full name, email, phone number, password (hashed), a device fingerprint used for fraud detection, and, at payment time only, your IP address.
From buyers
Delivery address and state/city, order history, cart contents, wishlist items, and a referral code if one was used at signup.
From sellers
Store name, description, logo and banner, bank account name/number/bank name (for payouts), BVN or CAC number depending on account type, and a WhatsApp number published publicly on the storefront.
Payment data
Nexo never stores card numbers, CVVs, or full payment details card data goes directly to our payment processor. Nexo stores only the transaction reference, amount, and status.
Who We Share Data With
| Third party | What they receive | Why |
|---|---|---|
| Our payment processor | Payment details, transaction amount, buyer name/email, seller bank details | Processing payments and paying sellers directly |
| Cloudinary | Uploaded images (products, logos, banners) | Image hosting and delivery |
| Google (optional) | Email and basic profile info | Only if you choose "Continue with Google" |
| Our email provider | Email address | Transactional emails only (confirmations, verification, resets) |
This policy refers to "our payment processor" rather than naming one permanently, since Nexo may change payment providers over time.
Cookies We Use
- Session cookie keeps you logged in. Required.
- CSRF cookie security, prevents cross-site request forgery. Required.
- Theme preference light/dark mode, stored in your browser.
- Currency preference NGN/USD, stored with your session.
- Guest cart tied to your session key if you're not logged in.
- Token Drop announcement flag stored only for your current browser tab, used to avoid repeating the same announcement more than once per visit.
None of these are third-party advertising or tracking cookies. Nexo does not currently run any ad network, analytics pixel, or cross-site tracking script.
Data Retention
- Account data is retained for as long as your account exists.
- Order records are retained indefinitely for dispute, tax, and audit purposes, even after an account is deleted, with personal identifiers minimized where possible.
- A deleted account cannot be recovered. Sellers cannot delete their account while they have active orders.
- Device fingerprint and ban records are retained even after account deletion, to enforce the platform's ban system.
Your Rights
- Request a summary of the data we hold on you.
- Correct inaccurate data via your profile settings.
- Request account deletion at any time (self-serve, in your account settings).
- Withdraw consent for optional features, such as Google sign-in linking.
Children's Privacy
Nexo is not directed at anyone under 18. Accounts found to belong to someone under this age will be removed.
Changes to This Policy
Nexo may update this policy from time to time. Material changes will be communicated by email. Continuing to use Nexo after a change means you accept the updated policy.
Contact
Questions about this policy or your data can be sent to support@nexo.ng.