Privacy Policy
Effective Date: October 23, 2026 • Last Updated: October 23, 2026
1. Who we are
ZeroComplex AI (“ZeroComplex”, “we”, “us” or “our”) builds software, intelligent systems, and digital products for businesses. This Privacy Policy explains how we collect, use, disclose, store, and otherwise process personal data when you visit zerocomplex.ai, contact us, apply to work with us, use our products or services, or otherwise interact with us.
Our legal entity is ZeroComplex AI Limited, registered in Nigeria, with its registered address in Lagos, Nigeria. For privacy questions or requests, contact privacy@zerocomplex.ai.
This policy covers our website and business interactions. A product may have a supplementary privacy notice or separate terms where its data practices differ. Read any applicable product-specific notice alongside this policy.
2. Our role
Depending on the interaction, ZeroComplex may act as:
When we decide why and how personal data is processed, such as for our website, sales enquiries, recruitment, account administration, and internal business operations.
When we process personal data on behalf of a business customer under that customer’s instructions, such as when a customer uses a ZeroComplex product to manage its own customers, staff, or operational records.
If you use a product through an organisation, that organisation may decide what data is submitted and how it is used. Contact that organisation first about access, correction, or deletion requests concerning data it controls. We will assist as required by our agreement and applicable law.
3. Personal data we may collect
The information we collect depends on how you interact with us.
3.1 Information you provide
This may include:
- Contact details: name, work email, phone number, job title, company, and other details you choose to provide.
- Communications: enquiries, messages, meeting notes, feedback, support requests, and information included in forms or correspondence.
- Account details: login identifiers, preferences, roles, permissions, and account administration records, where applicable.
- Commercial records: company details, project requirements, proposals, contracts, billing contacts, invoices, and transaction-related records.
- Recruitment information: CVs, portfolios, employment history, qualifications, and information submitted as part of an application.
- Product content: information, files, prompts, instructions, records, or other content submitted to a ZeroComplex product. The type and sensitivity depend on the product and how it is used.
Please do not submit sensitive personal data unless it is necessary for the intended service and you are authorised to provide it.
3.2 Information collected automatically
When you visit our website or use an online service, we or our providers may collect technical and usage information such as IP address and approximate location derived from it; browser, device, operating system, language, and referring page; pages viewed, links clicked, session duration, and interaction events; timestamps, diagnostic logs, error reports, and performance information; and cookie identifiers or similar technologies, where used.
The exact information depends on the website configuration, analytics tools, hosting provider, and browser settings.
3.3 Information from other sources
Where permitted by law, we may receive information from business partners, public business sources, professional networks, referrals, event organisers, recruitment platforms, or service providers. We may combine it with information you provide to manage business relationships, respond to enquiries, or maintain accurate records.
4. How we use personal data
We may use personal data to:
- Provide, administer, maintain, and support services;
- Respond to enquiries, arrange meetings, prepare proposals, and communicate with customers or prospects;
- Diagnose errors, improve usability, understand feature use, evaluate performance, and develop functionality;
- Protect systems and people, detect fraud or abuse, investigate incidents, and enforce permissions;
- Manage contracts, billing, accounting, suppliers, and internal administration;
- Assess job applications and administer recruitment;
- Send service notices, security information, product updates, or marketing communications where permitted; and
- Comply with law, respond to lawful requests, maintain required records, and establish or defend legal claims.
We do not use personal data for a purpose incompatible with the original purpose unless we have a lawful basis and provide any notice required by law.
5. Lawful bases
Where applicable law requires a lawful basis, we may rely on:
- Contract: to enter into or perform a contract with you or your organisation.
- Legitimate interests: to secure services, respond to business enquiries, improve our offerings, or manage relationships, where those interests are not overridden by your rights and interests.
- Consent: for activities where consent is required, such as certain optional cookies or marketing. You may withdraw consent at any time; withdrawal does not affect processing already carried out.
- Legal obligation: to comply with applicable law or valid legal requirements.
- Vital interests or public interest: where applicable law permits and the circumstances justify it.
We process personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and other applicable global data privacy regulations.
6. Cookies and similar technologies
Our website may use cookies, pixels, local storage, or similar technologies to keep the website working, remember preferences, understand traffic and performance, help protect against misuse, or measure communications where configured.
Where required, we will ask for consent before placing non-essential cookies. You can also manage cookies through your browser settings. Blocking some cookies may affect website functionality.
7. How we share personal data
We may share personal data, where appropriate, with:
- Hosting, cloud infrastructure, database, storage, and backup providers;
- Software providers supporting communications, CRM, analytics, monitoring, development, or support;
- AI model and processing providers where a feature uses an external model or API;
- Payment, accounting, and invoicing providers;
- Professional advisers, including legal, audit, accounting, insurance, and security advisers;
- Business partners and subcontractors involved in delivering an agreed service;
- Public authorities or other parties where disclosure is required by law, needed to protect rights or safety, or necessary to establish or defend legal claims; and
- A transaction counterparty or successor in a merger, investment, restructuring, financing, or sale of all or part of our business, subject to appropriate safeguards.
We seek to limit disclosures to what is reasonably necessary and require service providers to protect personal data through appropriate contractual, technical, and organisational measures.
We do not sell personal data in exchange for money.
8. AI features and submitted content
Some services may use AI models or automated systems to generate outputs, summarise information, classify content, recommend actions, or carry out workflows.
Submitted content may be processed by ZeroComplex and, where configured, third-party AI or infrastructure providers. Outputs can be inaccurate, incomplete, or unsuitable for a particular decision and should be reviewed where consequences matter. Do not submit personal data or confidential information unless you are authorised to do so and the service is appropriate for it.
Whether a third-party provider uses submitted content to improve its models depends on the provider, service configuration, and applicable contract. We do not promise that a provider will never use data for model improvement unless that has been verified for the relevant service.
We do not intend to use personal data for solely automated decisions producing legal or similarly significant effects about an individual unless permitted by applicable law and subject to required safeguards.
9. International transfers
We and our providers may process personal data in countries other than the country where it was collected. Where a transfer is subject to the Nigeria Data Protection Act 2023 or another applicable privacy law, we will use an appropriate transfer mechanism or safeguard as required, which may include an adequacy decision, contractual protections, consent where legally valid, or another permitted basis.
For information about relevant transfer arrangements, contact privacy@zerocomplex.ai.
10. Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including providing services, maintaining business records, resolving disputes, enforcing agreements, and meeting legal obligations.
Retention periods depend on the information, service, contractual commitments, legal requirements, and security or dispute-resolution needs. When data is no longer needed, we will delete it, anonymise it, or securely isolate it until deletion is possible, subject to law and backup cycles.
For customer product data, retention and deletion may also be governed by the relevant customer agreement and product configuration. Customers may need to export data before account closure.
11. Security
We use technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. Depending on the service and risk, measures may include access controls, authentication, secure development practices, logging, backups, vulnerability management, encryption, and incident response procedures.
No website, network, storage system, or electronic transmission can be guaranteed to be completely secure. Our separate Security page provides a general overview and should be read with product-specific documentation and contractual commitments.
12. Your rights and choices
Subject to applicable law and exceptions, you may have the right to request access to personal data; correct inaccurate or incomplete data; request deletion or restriction; object to certain processing, including direct marketing; withdraw consent where processing relies on consent; request portability where the right applies; request information about recipients or international transfers; and complain to the relevant data protection authority.
To make a request, email privacy@zerocomplex.ai with the subject “Privacy Request”. We may need to verify your identity or clarify the request. We will respond within the timeframe required by applicable law.
If we process information on behalf of a customer, we may direct you to that customer or forward your request to it, as appropriate.
13. Marketing
We may send business updates or marketing communications where permitted by law. Opt out using the unsubscribe link, where available, or contact privacy@zerocomplex.ai. Even if you opt out, we may still send essential service, security, contractual, or legal notices.
14. Children’s data
Our website and business services are not intentionally directed to children. We do not knowingly collect children’s personal data through the website unless a particular service has a legitimate and appropriately safeguarded purpose for doing so. If you believe a child has provided personal data inappropriately, contact privacy@zerocomplex.ai.
15. Third-party websites
Our website or services may link to third-party websites, applications, or services. Their practices are governed by their own notices and terms. We are not responsible for practices we do not control. Review third-party notices before providing personal data.
16. Changes
We may update this policy to reflect changes in practices, products, technologies, or legal obligations. We will update the “Last updated” date and, where required, provide additional notice or obtain consent. If a change materially affects processing, we will take steps required by applicable law.