Privacy Policy

We collect the information needed to provide UploadDoc, operate document workflows, process payments, and keep accounts secure.

In accordance with the Nigeria Data Protection Act (NDPA) 2023, we process your personal data under the following lawful bases:

• •Contractual Necessity: To fulfill our obligation to provide you with the UploadDoc service, including account management, document submission, and workflow routing.
• •Consent: Where you have explicitly agreed to the processing, such as for marketing communications, optional cookies, or when a parent/guardian consents to data processing for minors under 18.
• •Legitimate Interests: To improve our service, monitor platform performance, troubleshoot errors, prevent fraud, and secure the platform, provided these interests do not override your privacy rights.
• •Legal Obligation: To comply with applicable laws and regulations in Nigeria, including tax guidelines, payment regulatory audits, and requests from law enforcement agencies.

We use personal information for the following purposes:

• •To create, authenticate, maintain, and protect your UploadDoc account.
• •To let users submit documents to vendors and let vendors review, accept, manage, and process those documents.
• •To process payments, confirm transactions, prevent fraud, and maintain financial records.
• •To send service messages, status updates, support replies, and important account or policy notices.
• •To monitor reliability, troubleshoot issues, improve features, and understand aggregate product usage.

Documents submitted through UploadDoc are visible to the account that uploaded them and to the vendor or organization selected to receive them. Vendors may access submitted documents only for the purpose of reviewing, accepting, fulfilling, or managing the related request.

We do not sell uploaded documents or use document contents for advertising. UploadDoc personnel may access documents only where needed to provide support, investigate abuse, comply with legal requirements, or maintain platform security.

We use trusted third-party providers to operate core parts of UploadDoc. These providers process information only as needed to deliver their services to us and are contractually bound to protect your information in compliance with the NDPA 2023.

We do not sell your personal information. We share information only in limited situations:

• •With vendors or organizations you choose when submitting documents.
• •With service providers such as Paystack, Cloudflare R2, Vercel, Firebase, Resend, and Expo Server SDK.
• •Where required to comply with law, enforce our terms, prevent fraud, protect users, or respond to lawful requests.
• •In connection with a merger, acquisition, restructuring, or transfer of our business, subject to appropriate safeguards.

We keep information only for as long as reasonably necessary to provide UploadDoc, comply with legal obligations, resolve disputes, enforce agreements, and protect the platform.

You may delete documents or request account deletion earlier. Some limited records, such as payment, security, or audit records, may be retained where required for legal, tax, accounting, fraud prevention, or dispute-resolution purposes.

We use administrative, technical, and organizational safeguards designed to protect personal information and uploaded documents against unauthorized access, loss, misuse, or alteration.

No online service can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us if you believe your account has been compromised.

Under the Nigeria Data Protection Act (NDPA) 2023, you are guaranteed several rights regarding your personal data. You may exercise these rights at any time:

• •Right to Access: Request a copy of the personal data we hold about you.
• •Right to Rectification: Request correction of inaccurate or incomplete personal information.
• •Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data or account, subject to legal, auditing, or tax obligations.
• •Right to Restriction of Processing: Request that we limit how we process your personal data.
• •Right to Object: Object to processing of your data based on our legitimate interest or for direct marketing.
• •Right to Data Portability: Request that we transfer your personal data to you or another service provider in a structured, commonly used format.
• •Right to Withdraw Consent: Withdraw your consent to data processing at any time (e.g., opting out of marketing or analytics). This does not affect processing done prior to withdrawal.

To exercise any of these rights, request account deletion, or ask privacy questions, please contact us at info@uploaddoc.app. We will respond within the statutory timeframe required by the NDPA.

If you believe that UploadDoc has processed your personal data in violation of the Nigeria Data Protection Act (NDPA) 2023 or other applicable data protection laws, you have the right to lodge a formal complaint with the regulatory authority:

We encourage you to contact us first at info@uploaddoc.app to resolve any concerns directly.

UploadDoc may use cookies, local storage, and similar technologies to keep you signed in, remember preferences, secure the service, measure performance, and understand how the app is used.

Vercel Analytics and Firebase Analytics help us understand aggregate traffic and performance patterns, as well as features used. You can control cookies through your browser settings, but disabling certain cookies may affect account or platform features.

Your information may be processed and stored in servers located outside the Federal Republic of Nigeria (e.g. servers operated by Cloudflare, Vercel, or MongoDB Atlas in Europe, the United States, or other global hosting centers).

In accordance with Sections 41-43 of the NDPA 2023, we take all necessary steps to ensure that any cross-border transfers of your personal data are secured through appropriate safeguards, such as standard contractual clauses, ensuring the receiving jurisdiction has adequate levels of data protection.

Under the NDPA 2023, a child is defined as any person under the age of 18. UploadDoc is not intended for use by children under 18 without appropriate authorization.

Where children under 18 use UploadDoc (such as students submitting assignments), such use must be authorized by a parent, legal guardian, or an educational institution (acting on behalf of the parent/guardian). We require schools and departments using our platform to ensure they have appropriate authority and consent.

If you believe that we have collected personal data from a child under 18 without proper parental or educational authorization, please contact us immediately at info@uploaddoc.app so we can take steps to remove the data.