Nigeria

Privacy notice

Effective 15 September 2026. This notice explains how Docufill handles information when you create a reusable profile, complete documents, sign, or participate in another person's request.

What we collect

We process account details, details you choose to share after sign-in or later in your profile, uploaded documents, answers, signatures, participant contact details, consent records, and security/audit events. We derive limited facts—such as employment duration—only from confirmed information.

Why we use it

We use this information to authenticate you, understand and complete your documents, coordinate assigned participant sections, generate previews and downloads, prevent abuse, and honour your privacy requests. Optional document memory is processed only after you enable it for that document.

AI and document memory

Deterministic matches are preferred. AI receives only context relevant to a field and its suggestions remain drafts until you confirm them. Identity and financial details are never invented. Customer documents are not used to train AI models. Optional semantic memory excludes facts marked sensitive and can be disabled, which queues deletion of the related index.

Sharing and processors

We share information only with service providers needed to operate Docufill, such as hosting, encrypted storage, authentication, email delivery, and configured AI processing. A participant can access only their assigned questions and the document subject after verification. They cannot view the PDF or another participant's information.

Retention and deletion

Documents, profile facts, saved signatures, and audit events remain until you delete the applicable data or your account. Participant links expire after seven days, verification codes after fifteen minutes, verified sessions after two hours, and download links after five minutes. Operational backups may persist for the provider's limited backup cycle before being overwritten.

Security

Docufill uses encryption in transit, application-level encryption for reusable facts and signatures, private storage, short-lived signed URLs, scoped access policies, request limits, recent-authentication checks for signature and account operations, and append-only audit controls. No internet service can promise absolute security.

Your rights

Subject to applicable Nigerian data protection law, you may ask to access, export, correct, delete, restrict, or object to processing of your information, and may withdraw optional consent. Account settings provide export, correction, memory controls, and deletion. You may also complain to the Nigeria Data Protection Commission.

Contact

For a privacy request or question, email privacy@example.com. We may verify your identity before fulfilling a request.