1. Data Categories & Reason for Collection
To eliminate fraud and maintain objective validation across projects, BuildCrex processes the following specific data segments:
- Identity & Biometric KYC: Bank Verification Numbers (BVN), government-issued photo IDs, and business registration details. This ensures absolute identity verification and enforces platform trust.
- Precise Geolocation (GPS logs): Continuous tracking coordinates logged through field applications and milestone update portals. This data is used exclusively to verify that progress updates correspond to the exact property boundaries in Lagos (e.g., Lekki, Surulere, Ikeja), preventing fraudulent progress reporting.
- Media Assets & Site Analytics: Time-stamped progress photos, site verification videos, and architectural blueprints compiled within the Project DNA Ledger.
- Financial Flow Records: Vault balances, escrow tracking timestamps, and routing details required to process secure releases and execute split-payment workflows.
2. Data Retention Matrix
| Data Class | Retention Term | Statutory / Legal Justification |
|---|---|---|
| Project DNA Ledgers, GPS logs, Site Photos | 7 Years post-project closure | Required to defend the platform against long-tail structural liability or subsequent contract litigation. |
| Unverified / Rejected Onboarding Files | 24 Months from submission | Kept securely to flag repeat bad actors or sybil attacks trying to bypass verification. |
| Escrow Vault Financial Ledgers | Indefinitely | Maintained to satisfy Central Bank of Nigeria (CBN) financial reporting rules and Anti-Money Laundering (AML) acts. |
3. Data Sharing & International Transfers
- Banking Gateways: Financial transaction tracks are shared only with our partner CBN-licensed commercial bank networks via end-to-end encrypted clearing channels.
- Zero Third-Party Commercialization: BuildCrex does not sell, rent, or trade your operational data, site photos, or personal identification lines to external marketing entities.
For diaspora clients transmitting capital from international jurisdictions (including the UK, EU, US, and Canada), personal and financial information is transferred to servers located within Nigeria. These cross-border data transfers are executed strictly subject to legally recognized mechanisms, including Standard Contractual Clauses (SCCs), or explicitly based on the user's informed consent for the necessary performance of the BuildCrex escrow contract. Data is protected under advanced encryption matrices while moving between international networks and local servers.
4. Statutory Rights of the Data Subject
Under the NDPA, users can execute their data rights by emailing info@buildcrex.com. You maintain the right to object to automated notification tracking, request profile rectification, or demand profile erasure. Requests for erasure will not override financial ledger tracking histories or active milestone documentation required for active civil or regulatory compliance defense.