Privacy Policy

1. Introduction

Zetra ID is a digital identity platform that gives every user a permanent sequential identifier in the format ZTR-000001and a matching email-style address in the format username@zetramail.ng (your "ZetraMail"). Zetra ID enables secure sign-in to third-party applications and peer-to-peer messaging between Zetra users.

We take your privacy seriously. This document describes, in plain language, what information we collect, why we collect it, how we protect it, and the choices you have. It is designed to comply with the Nigeria Data Protection Act 2023 ("NDPA") and related regulations issued by the Nigeria Data Protection Commission ("NDPC").

2. Who We Are

Zetra ID is operated by the Company, a business established in Nigeria. For the purposes of the NDPA, we act as a data controller in respect of the personal data you provide when creating and using your Zetra ID account, and as a data processor where we handle data on behalf of third-party applications that rely on Zetra ID for login.

3. Scope of This Policy

This policy applies to:

• The Zetra ID mobile application on Android and iOS.
• Your ZetraMail address and inbox.
• Cross-app login sessions initiated through Zetra ID.
• Peer-to-peer messaging between Zetra users.
• Our websites, support channels, and related services.

It does not apply to third-party apps or websites that you choose to sign in to using your Zetra ID. Those services have their own privacy policies which govern how they handle any data they receive from you.

4. Information We Collect

4.1 Information you provide

• Account details: your chosen username, password (stored as a salted hash), display name, date of birth, and, where required, a recovery email or phone number.
• Identity verification data: where identity checks are required, government-issued ID numbers (such as NIN or BVN) and selfie images used solely for verification.
• Profile content: profile photo, bio, and any other information you voluntarily add.
• Messages: the content of ZetraMail and peer-to-peer messages you send or receive.
• Support communications: anything you send us when you contact support.

4.2 Information collected automatically

• Device information (model, operating system, unique device identifiers).
• Log data (IP address, access times, crash reports).
• Approximate location derived from your IP address, used for fraud prevention.
• Usage data (features used, actions taken, session duration).

4.3 Information from third parties

When you sign in to a third-party app using Zetra ID, that app may share limited information back with us — for example, that a successful login occurred — so that we can display your connected apps and revoke access on request.

5. How We Use Your Information

We use your personal data to:

• Create and maintain your Zetra ID and ZetraMail address.
• Authenticate you and secure cross-app logins.
• Deliver messages between you and other Zetra users.
• Prevent, detect, and respond to fraud, abuse, and security incidents.
• Provide customer support and respond to your requests.
• Improve, test, and develop new features.
• Comply with legal, regulatory, and law-enforcement obligations.
• Send you important service notifications about your account.

We do not sell your personal data. We do not use the content of your ZetraMail messages to serve you advertising.

6. Legal Basis for Processing

Under the NDPA, we rely on the following lawful bases:

• Contract: to provide the services you sign up for.
• Consent: for optional features such as marketing communications, where you can withdraw consent at any time.
• Legal obligation: to comply with Nigerian law and lawful requests from authorities.
• Legitimate interests: to keep our services safe, secure, and functional, provided your rights do not override those interests.
• Vital interests: in rare cases where processing is necessary to protect life.

7. ZetraMail Messaging

ZetraMail is a peer-to-peer messaging service built into Zetra ID. Messages are transmitted through our servers so that they can be reliably delivered to the recipient's device. We apply encryption in transit and at rest, and we restrict internal access to message content strictly to what is necessary for delivery, abuse response, and legal compliance.

You are responsible for the content of the messages you send. Do not use ZetraMail to send unlawful, harassing, deceptive, or infringing content. We may suspend accounts that violate our acceptable-use rules.

8. Cross-App Logins & Third Parties

When you use Zetra ID to sign in to a third-party app, we share only the minimum information required — typically your Zetra ID (e.g. ZTR-000001), display name, and the specific permissions you approve. You can view and revoke connected apps at any time inside the Zetra ID app.

Third-party apps are independent controllers of any data you share with them. Review their privacy policies before signing in.

9. How We Share Information

We share personal data only in these limited situations:

• With other Zetra users when you message them or add them as a contact.
• With third-party apps you explicitly log in to using Zetra ID.
• With service providers (cloud hosting, analytics, fraud prevention, customer support) bound by confidentiality and data-processing agreements.
• With authorities when required by valid legal process under Nigerian law.
• In corporate transactions such as a merger, acquisition, or restructuring, subject to appropriate safeguards.

10. Data Retention

We keep your account information for as long as your Zetra ID is active. When you delete your account, we deactivate your ZetraMail address and remove or anonymise your personal data within a reasonable period, except where we are legally required to retain it (for example, for tax, fraud, or security records).

Because Zetra IDs are permanent and sequential, the identifier itself (e.g. ZTR-000001) will not be reissued to another user.

11. Security of Your Data

We use industry-standard safeguards, including encryption in transit (TLS) and at rest, hashed passwords, strict access controls, logging, and regular security reviews. No system is perfectly secure, and you play an important role by using a strong password, keeping your device secure, and not sharing your credentials.

If we become aware of a personal data breach that is likely to result in risk to your rights, we will notify you and the NDPC in line with the NDPA's requirements.

12. Your Rights Under the NDPA 2023

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to legal exceptions.
• Restrict or object to certain processing.
• Data portability, where technically feasible.
• Withdraw consent at any time, without affecting past processing.
• Lodge a complaint with the Nigeria Data Protection Commission.

To exercise these rights, contact us using the details in Section 17. We will respond within the timeframes required by law.

13. Children's Privacy

Zetra ID is not directed at children under 13. We do not knowingly collect personal data from children under 13 without verifiable parental consent. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

14. International Data Transfers

Your data is primarily stored and processed in Nigeria. Where we transfer data outside Nigeria (for example, to cloud providers), we ensure appropriate safeguards are in place as required by the NDPA, such as adequacy decisions, standard contractual clauses, or your explicit consent.

15. Cookies & Similar Technologies

The Zetra ID mobile app uses local storage and device identifiers to keep you signed in and improve performance. Our websites may use cookies for essential functionality, analytics, and security. You can control cookies through your browser settings; disabling essential cookies may affect site functionality.

16. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email and update the "Last updated" date at the top of this page. Continued use of Zetra ID after changes take effect constitutes acceptance of the updated policy.

17. Contact Us

Questions, requests, or complaints about this Privacy Policy or your personal data can be sent to our Data Protection Officer:

Legal note: This document has been drafted for clarity and NDPA alignment but should be reviewed by a licensed Nigerian attorney before being treated as final, legally binding terms.