This Privacy Policy explains how IOXFORGE TECHNOLOGIES LIMITED ("Ioxforge," "we," "us," or "our") collects, uses, discloses, and protects personal data in connection with our website (ioxforge.com) and, collectively, the family of software products we build and operate (each, a "Product," together the "Products"). This is not a policy about our marketing site alone: it governs the shared account, billing, and identity data that flows across Ioxforge and every current and future Product operated under our umbrella.
Ioxforge currently operates a portfolio of Products including Marktraq, with more Products planned. Each Product has its own, more detailed privacy policy covering that Product's specific features and data practices. Where a Product-specific policy exists, use the links in this document to find it.
1. Who We Are
IOXFORGE TECHNOLOGIES LIMITED is a company registered in Nigeria (RC 9271810). Ioxforge is a product studio: we build and operate multiple SaaS Products under one corporate umbrella, and this Privacy Policy is the umbrella-level statement of how we handle personal data across that portfolio.
2. Information We Collect
We separate what we collect at the account/billing level, which applies across every Product, from what an individual Product collects for its own features.
Collected by Ioxforge, across Products:
- Identity data: name, email address, and, where applicable, a shared account identity used to sign in across Ioxforge Products.
- Billing data: subscription plan, billing address, and transaction history. Card and other payment details are collected and processed directly by our payment processor, Paddle.com Market Limited ("Paddle"), acting as merchant of record; Ioxforge does not store full payment card numbers.
- Support and correspondence data: messages you send us, such as through our contact form or support email.
- Technical data: IP address, browser and device information, and basic usage/log data needed to operate and secure our website and account systems.
Collected by each Product:
Each Product may collect additional data specific to its own features (for example, content you upload, usage analytics for that Product, or AI processing inputs and outputs). That detail lives on the Product's own privacy policy, for example marktraq.com/privacy-policy, which you should read for the full picture of how that Product handles your data.
3. How We Use Information
We use the data described above to:
- Create and administer your account, and, where relevant, your shared identity across Products.
- Process subscriptions, billing, and payments through Paddle.
- Provide customer support and respond to inquiries.
- Secure our systems, detect and prevent fraud or abuse.
- Comply with legal, tax, and regulatory obligations.
- Communicate service, billing, and policy updates. We do not sell personal data.
4. Payment Processing
Paddle acts as merchant of record for subscription billing across Ioxforge Products, including Marktraq. Paddle collects and processes payment information directly and is subject to its own privacy policy. Ioxforge receives transaction and subscription status data from Paddle but does not directly handle or store full card details.
5. Cookies and Similar Technologies
Ioxforge and its Products use cookies and similar technologies, primarily essential cookies required to keep you signed in and to operate account sessions securely. For example, Marktraq uses cookies for authentication. Blocking these essential cookies in your browser may prevent you from signing in or using a Product. A Product may also use additional, non-essential cookies (for example, analytics); where it does, the details are disclosed on that Product's own privacy policy, for example marktraq.com/privacy-policy. You can control or delete cookies through your browser settings at any time.
6. Data Sharing and Disclosure
We share personal data only with:
- Service providers who process data on our behalf (for example, Paddle for payments, hosting and infrastructure providers, and email delivery services), under confidentiality and data protection obligations.
- Regulators, courts, or authorities where required by law.
- A successor entity in the event of a merger, acquisition, or sale of assets, subject to this Policy or a comparable one.
We do not share personal data with third parties for their own marketing purposes.
7. Data Retention and Security
We retain personal data for as long as needed to provide our services, meet legal and tax obligations (including billing records required by Nigerian and international tax law), and resolve disputes. Retention periods can vary by data category and by Product; where a Product's own policy states a different retention period for that Product's data, the Product-specific period applies to that data. We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse, though no system is completely secure.
8. Your Rights
Depending on where you are located, you may have rights to access, correct, delete, or port your personal data, or to object to or restrict certain processing. We honor these rights consistent with applicable law, including:
- Nigeria's Data Protection Act (NDPA) and the regulations of the Nigeria Data Protection Commission (NDPC), as our primary applicable regime given our registration in Nigeria.
- The EU/UK General Data Protection Regulation (GDPR), for users in the European Economic Area and United Kingdom.
- The California Consumer Privacy Act (CCPA) and related U.S. state privacy laws, for applicable users.
To exercise a data rights request, contact us using the details in Section 14. We may need to verify your identity before acting on a request.
9. International Data Transfers
As a Nigerian company serving customers globally, we may transfer, store, and process personal data outside your home country, including in Nigeria and countries where our service providers operate. Where required, we rely on appropriate safeguards for such transfers.
10. Data Processing Agreements
If your organization requires a Data Processing Agreement to satisfy its own GDPR, NDPA, or similar obligations when using an Ioxforge Product to process personal data on its behalf, contact us using the details in Section 14 and we will provide our standard Data Processing Agreement for review and signature. Where a signed Data Processing Agreement is in place between us, its terms govern the processing it covers to the extent of any conflict with this Policy.
11. Children's Privacy
Our website and Products are not directed to, and may not be used by, anyone under the age of 16. We do not knowingly collect personal data from anyone under 16. If we learn that we have done so, we will delete that data.
12. Relationship to Product-Specific Privacy Policies
This Policy states the general, shared rules for how Ioxforge handles personal data across its Products at the account and billing level. Each Product may publish its own, more detailed privacy policy covering that Product's specific features and data practices. Where a Product's own privacy policy addresses something this Policy does not, or provides more specific detail for that Product's use, the Product-specific policy governs for that Product's use; this Policy continues to govern everything the Product-specific policy does not address, including our shared account and billing practices described above.
13. Changes to This Policy
We may update this Policy from time to time, for example as we add new Products or as laws change. We will update the effective date above when we do, and, for material changes, provide reasonable notice.
14. Contact Us
For questions about this Policy or to exercise a data rights request, contact IOXFORGE TECHNOLOGIES LIMITED at:
- Email: contact@ioxforge.com
- Entity: IOXFORGE TECHNOLOGIES LIMITED (RC 9271810), Nigeria