Privacy Policy

NaijaMoto (naijamoto.com) is operated by Mane Automobile Limited (RC 8498634), 77 Awolowo Road, Ikoyi, Lagos, Nigeria ("NaijaMoto", "we", "us").

For privacy questions, requests or complaints, contact our Data Protection Officer at admin@naijamoto.com.

We are the data controller for information about our buyers, dealers, importers and website visitors that we collect to run NaijaMoto — for example account details, listings, verification documents, usage data and payments.

We are a data processor for the conversations a business manages in its NaijaMoto inbox, including messages it receives from buyers through connected channels such as TikTok, Facebook Messenger, Instagram and (when available) Gmail. For that content the business is the controller and decides how it is used; we process it only on the business's instructions to provide the service.

Businesses that connect channels are responsible for having a lawful basis to handle their customers' messages and for any notices they owe those customers.

We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Commission's General Application and Implementation Directive, and other applicable Nigerian law.

Many buyers on NaijaMoto live outside Nigeria, including in the United Kingdom and the European Union. Where the UK or EU General Data Protection Regulation (GDPR) applies to you, we also honour your rights under it — see section 16.

Information you give us

• Buyer accounts: name, email, phone/WhatsApp number, password (stored only as a secure hash by our authentication provider).
• Business accounts: owner's name, business name, state and country, email, phone/WhatsApp, business profile, social media handles.
• Listings: vehicle details, photos and videos, VIN/chassis number, price, location, customs and registration status, descriptions.
• Messages: enquiries and replies sent through NaijaMoto chat, and messages from connected channels (section 7).
• Verification documents (businesses applying for a badge): CAC certificate, tax certificate, business bank account details, dealer plate and dealer ID, director's government ID (NIN slip, driver's licence or international passport), a live selfie, TIN and BVN, social media links, and for importers auction-account videos, bills of lading, dock receipts, customs papers (Form M, PAAR, SGD) and container/VIN numbers.
• Saved items and preferences: saved cars, saved searches and alert settings, notification and language preferences.
• Support and correspondence you send us.

Information collected automatically

• Device and log data: IP address, browser and operating system, pages viewed, referring page, date and time.
• Marketplace activity: listing views, phone-number reveals, WhatsApp taps and enquiries, used to show dealers performance statistics and to prevent abuse.

Information from others

• Connected platforms (TikTok, Meta, Google) when a business connects a channel — see section 7.
• Our payment provider, Paystack, when you subscribe to a paid plan — see section 9.

Verification involves data the NDPA treats as sensitive or high-risk, in particular the live selfie (which we compare with the photo on a government ID, and may be biometric data), NIN, BVN and bank details.

• We collect these only from businesses that choose to apply for a Verified Dealer or Verified Importer badge, and only with the applicant's explicit consent, given when they submit the application.
• We use them only to verify the business and its director, prevent fraud and impersonation, detect documents reused across accounts, and meet legal obligations.
• They are stored in private storage, are never shown publicly, and are accessible only to authorised NaijaMoto reviewers through short-lived secure links.
• You can withdraw consent at any time; we will then stop processing and remove the badge, except where we must keep records by law (section 13).

Verified businesses can connect social and email channels so buyer conversations arrive in their NaijaMoto inbox. Connecting is optional and is done by the account owner through the platform's own sign-in screen.

• What we receive: the connected account's ID, username and profile name; access tokens; conversations and messages sent to or from that account (text and attachments), with sender names/handles and timestamps.
• TikTok Business Messaging and Meta (Facebook Messenger and Instagram) data is used only to show, organise and reply to that business's conversations inside NaijaMoto, within each platform's rules (for example TikTok's 48-hour and Meta's 24-hour reply windows). We do not use it for advertising, profiling, or to contact people who have not messaged the business first.
• Gmail (planned): if we offer a Gmail channel, it will read and send emails only for the connected mailbox and only to provide the inbox feature.

Limited use. NaijaMoto's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We apply the same standard to data from TikTok and Meta. In particular, we:

• use platform data only to provide and improve the user-facing inbox features the business asked for;
• do not sell it, use it for advertising, or transfer it to anyone except as needed to provide the service, for security, or to comply with law;
• do not use it to train general-purpose artificial intelligence or machine-learning models;
• do not let people read it except with the business's permission, for security or abuse investigations, or where the law requires.

Disconnecting and deletion. A business can disconnect a channel at any time from Dashboard → Channels, and can also revoke NaijaMoto's access in the platform's own settings. When a channel is disconnected we delete its access tokens immediately. Conversations already in the inbox remain part of the business's workspace until the business deletes them or closes its account. To ask us to delete platform data, email admin@naijamoto.com or follow the steps on our data deletion page.

Businesses can use an AI assistant to draft listings, organise listings, suggest prices and draft replies. It is powered by Anthropic's Claude models.

• When you use it, we send Anthropic the request plus the context it needs — for example your listings, comparable public listings and the conversation you asked it to reply to.
• Anthropic processes this to return a response and, under its commercial terms, does not use our customers' content to train its models.
• The assistant only proposes actions. Nothing is published, marked sold, re-priced or sent until you approve it.
• We do not use your content or your customers' messages to train AI models.

Listing on NaijaMoto is free. Businesses can subscribe to NaijaMoto Pro (currently ₦20,000 per month) for additional features. Payments are processed by Paystack.

• Card and bank details are entered on Paystack's secure checkout; we never receive or store full card numbers or PINs.
• We receive and keep the transaction reference, amount, plan, status, dates and limited card details (such as card type and last four digits) to manage your subscription, receipts and accounting.
• Paystack processes payment data under its own privacy policy.

Listings (vehicle details, photos, price, area and state) and business profiles (business name, location, badges, contact phone and WhatsApp, social handles) are public, because their purpose is to be seen by buyers.

Buyers' phone numbers and email addresses are not shown to businesses when buyers message through NaijaMoto chat. If you call or WhatsApp a seller directly, your number is shared with them by your phone or WhatsApp.

We do not sell personal data. We share it only with:

We may also disclose information to professional advisers, auditors, law enforcement or regulators where required by law or to protect users, and to a buyer or successor if our business is reorganised or sold (they must keep it under this policy). Our service providers act on our instructions under contracts that require confidentiality and security.

Some of our providers store or process data outside Nigeria, mainly in the United Kingdom and United States. We transfer personal data abroad only in line with Part VIII of the NDPA — where the destination offers adequate protection, or with appropriate safeguards such as contractual commitments to confidentiality and security, or where another lawful basis applies (for example, it is necessary to perform our contract with you). You can ask us for more information about these safeguards at admin@naijamoto.com.

We may keep information longer where the law requires it or to resolve disputes, and will delete or anonymise it once no longer needed.

• All traffic is encrypted in transit (HTTPS/TLS).
• Database access is restricted by row-level security, so each user and business can only reach its own records; trust actions such as badge approvals run server-side only.
• Verification documents are kept in private storage and opened only through short-lived links by authorised reviewers.
• Passwords are hashed by our authentication provider; channel tokens are never exposed to the browser.

Under the NDPA (sections 34–38) you can:

• be informed about how we use your data and get a copy of it (access);
• correct inaccurate or incomplete data;
• ask us to delete it, or restrict how we use it;
• receive it in a portable format;
• object to processing based on legitimate interests, and to direct marketing at any time;
• withdraw consent at any time (this does not affect processing before withdrawal);
• not be subject to a decision based solely on automated processing that significantly affects you.

Many of these you can do yourself in your account (edit profile, delete listings, disconnect channels, delete your account under Settings). For anything else email admin@naijamoto.com. We may need to verify your identity, and will respond within the time the law requires. You also have the right to complain to the Nigeria Data Protection Commission.

If you use NaijaMoto from the United Kingdom, the European Economic Area or Switzerland, the GDPR may also apply. The legal bases in section 6 correspond to GDPR article 6 (contract, consent, legal obligation, legitimate interests) and, for sensitive data, explicit consent under article 9. You have the rights of access, rectification, erasure, restriction, portability and objection, the right to withdraw consent, and the right to complain to your local data protection authority (for example the UK Information Commissioner's Office).

Your data is handled by our providers listed in section 11, including in the United Kingdom and United States. Contact admin@naijamoto.com to exercise your rights.

Note: TikTok's messaging API is not available for TikTok accounts in the EEA, Switzerland or the UK, so those accounts cannot be connected as a channel.

We use automated checks to flag possible duplicate listings and documents reused across accounts. These flags are reviewed by a person; we do not make decisions with legal or similarly significant effects about you based solely on automated processing. Badge approvals and listing rejections are made by our team.

We use only what is strictly necessary to run the site — for example storing your sign-in session in your browser. We do not currently use advertising or analytics cookies. If we introduce them, we will update this policy and ask for your consent where required.

NaijaMoto is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, contact admin@naijamoto.com and we will delete it.

If a personal data breach is likely to put your rights and freedoms at risk, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, as the NDPA requires, and tell affected users without undue delay where the risk is high, including what we are doing about it.

We may update this policy as NaijaMoto grows, for example when we add new channels or payment features. We will post the new version here with a new "last updated" date and, for significant changes, notify account holders by email or in the dashboard.

Mane Automobile Limited (RC 8498634)
77 Awolowo Road, Ikoyi, Lagos, Nigeria
Data Protection Officer: admin@naijamoto.com
See also our Terms of Service.