Privacy
Policy.

XcroTrust (“we,” “our,” or “us”) operates a mobile escrow payment platform that facilitates secure transactions between buyers and sellers. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our application and services.

By using XcroTrust, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access or use our services.

1. Information We Collect

2. How We Use Your Information

• To create and manage your account
• To process escrow transactions and payouts
• To verify your identity through KYC procedures
• To facilitate communication between buyers and sellers
• To resolve disputes between transaction parties
• To send transaction updates, notifications, and alerts
• To detect and prevent fraud, unauthorized transactions, and other illegal activities
• To comply with legal and regulatory requirements
• To improve our platform, features, and user experience
• To provide customer support

3. Data Security

We take the protection of your personal information seriously and apply industry-standard safeguards across our platform, infrastructure, and internal processes. Access to user data is tightly controlled and continuously monitored.

While we strive to protect your information, no system is completely immune to risk. We are committed to following best practices and responding quickly to any incident that may affect the security of your data.

4. Third-Party Services

We work with trusted third-party service providers to deliver our services. These include:

• PPayment Partner -- Our licensed payment partner processes all payments and payouts on the platform and operates under its own privacy policy governing the handling of payment information.
• KKYC Verification Providers -- We use certified identity verification providers to process your identification documents. These providers are bound by data processing agreements and handle your data in accordance with applicable data protection laws.
• NNotification Services -- We use third-party providers for push notifications and email delivery to keep you informed about your transactions. We do not send SMS messages.

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your personal data, subject to legal and regulatory requirements
• The right to withdraw consent for data processing where consent is the basis for processing
• The right to data portability
• The right to lodge a complaint with the relevant data protection authority

To exercise any of these rights, please contact us at the email address provided below. We will respond to your request within 30 days.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. We may also retain and use your information to comply with legal obligations, resolve disputes, and enforce our agreements. Transaction records are retained for a minimum period as required by applicable financial regulations in Nigeria. For exactly what is deleted when you close your account and which records we are required to keep, see our account deletion policy.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. We encourage you to review this policy periodically.