Privacy Policy
Last updated: January 18, 2026
Our Commitment to You
We believe your personal data belongs to you. We never sell your information, we minimize data collection, and we give you full control over your data.
Your Data is Encrypted
All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
We Never Sell Data
Your personal information is never sold to third parties. Period.
You Control Your Data
Export or delete your data at any time from your account settings.
1. Information We Collect
We collect information you provide directly to us:
- Account Information: Name, email address, password (hashed)
- Profile Information: Bio, location, heritage connections, profile photo
- Application Data: Information submitted for citizenship applications
- Ancestry Data: Lineage information, DNA test results (if you choose to share)
- Communication Data: Messages, support requests
Information Collected Automatically
- Device information (browser type, operating system)
- IP address and approximate location
- Usage data (pages visited, features used)
- Cookies and similar technologies
2. How We Use Your Information
We use your information to:
- Provide and maintain our services
- Process citizenship and ancestry applications
- Connect you with verified lawyers and service providers
- Send service-related communications
- Improve and personalize your experience
- Ensure platform security and prevent fraud
- Comply with legal obligations
3. Information Sharing
We share your information only in these circumstances:
- With Your Consent: When you explicitly authorize sharing
- Service Providers: With trusted partners who help us operate (hosting, analytics)
- Legal Requirements: When required by law or to protect rights and safety
- Business Transfers: In connection with a merger or acquisition (with notice)
We never sell your personal information to advertisers or data brokers.
4. Data Security
We implement industry-standard security measures:
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for data at rest
- Regular security audits and penetration testing
- Access controls and authentication requirements
- Secure data centers with physical security
5. Your Rights and Choices
You have the following rights regarding your data:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data
- Export: Download your data in a portable format
- Opt-out: Unsubscribe from marketing communications
- Restriction: Limit how we process your data
To exercise these rights, visit your Account Settings or contact us at privacy@nexus.africa.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain information for legal compliance, dispute resolution, or legitimate business purposes for up to 90 days.
7. International Data Transfers
Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions where applicable.
8. Sensitive Heritage Data
Given our mission to serve the African diaspora, we may process sensitive heritage-related information (ethnic origin, ancestry). This data is:
- Collected only with explicit consent
- Protected with additional security measures
- Never shared without your permission
- Deletable at your request
9. Children's Privacy
Our services are not intended for users under 18. We do not knowingly collect data from children. If you believe we have collected such data, please contact us.
10. Changes to This Policy
We may update this policy periodically. We will notify you of significant changes via email or prominent notice on our platform. Continued use after changes constitutes acceptance.
11. Contact Us
For privacy-related questions or to exercise your rights:
- Email: privacy@nexus.africa
- Mail: Diaspora Nexus, Privacy Team, [Address]