Privacy Policy

This Privacy Policy explains how the Kairaxis entity providing the Services (“Kairaxis,” “we,” “us,” or “our”) handles personal data when you visit, create an account, save marketplace items, act as an author, use an API, communicate with us, or complete a transaction. It should be read with our Terms of Service and Author Agreement.

For processing that Kairaxis determines—such as account, marketplace, security, and author-review operations—the applicable Kairaxis entity is the controller. Authors may separately be controllers of personal data they independently collect through their products or services.

• Account and identity data: email address, authentication identifiers, session records, account status, and verification information when legally or commercially required.
• Marketplace activity: saved items, searches and filters, listing interactions, purchases, licences, support history, reports, disputes, and refund or chargeback records.
• Author data: listing drafts, delivery content, source and preview links, pricing, author profile and business details, review history, performance metrics, tax or payout information when paid selling is activated.
• Device and usage data: IP address, browser and device information, pages requested, timestamps, referring URLs, diagnostic events, security signals, and infrastructure logs.
• Communications: messages, feedback, legal notices, support requests, and information you provide when reporting content or exercising privacy rights.
• Payment data: transaction identifiers, status, amount, currency, and limited billing metadata. Payment providers generally process full card or bank credentials under their own privacy terms.

• Directly from you when you register, submit a listing, save content, transact, communicate, or exercise a right.
• Automatically from your browser, device, cookies, and hosting or security infrastructure.
• From authors, payment and identity providers, fraud-prevention services, public sources, or other users when needed to operate and protect the marketplace.

• Provide accounts, authentication, saved libraries, Author Studio, listing review, marketplace discovery, delivery, support, APIs, and transactions.
• Perform a contract with you, take steps at your request, and administer purchases, licences, payouts, taxes, refunds, and disputes.
• Protect users and Kairaxis through access control, fraud and abuse detection, moderation, auditing, debugging, security, and enforcement.
• Comply with tax, accounting, consumer, marketplace, sanctions, anti-money-laundering, court, regulator, and other legal obligations where applicable.
• Improve usability, relevance, accessibility, performance, and reliability through aggregated or appropriately de-identified analysis.
• Communicate service, security, legal, review, and transaction updates. Marketing is sent only where permitted, and you can opt out of marketing messages.

Where a law such as the GDPR or Nigeria Data Protection Act requires a legal basis, we rely as appropriate on performance of a contract, steps requested before a contract, compliance with legal obligations, legitimate interests that are not overridden by your rights, protection of vital interests, and consent. Legitimate interests include securing and improving the Services, preventing fraud, enforcing agreements, and operating a trustworthy marketplace.

When processing depends on consent, you may withdraw it prospectively. Withdrawal does not affect processing already performed lawfully. Some data is required to create an account, complete a transaction, verify an author, or meet a legal duty; without it, the relevant feature may be unavailable.

• Service providers that host infrastructure, provide authentication and databases, deliver communications, prevent abuse, analyse reliability, support users, verify identity, or process payments and payouts. They receive only data reasonably needed for their role.
• Google receives analytics events and device or usage information only after you use Privacy choices to allow Google Analytics. Google acts under its own applicable service and privacy terms and may process data internationally.
• PostHog receives cookieless product-analytics events through its US Cloud endpoint. Requests can include ordinary network and device information such as IP address and user agent; PostHog uses these inputs to derive a short-lived server-side identifier. We disable session recording, surveys, persistent browser identifiers, and identified profiles for ordinary marketplace browsing, and mask page text and element attributes before autocaptured events are sent.
• Authors and buyers when needed to display a public listing, identify the contracting seller, deliver an item, provide support, or resolve a transaction. Draft delivery content is not public by default.
• Professional advisers, auditors, insurers, banks, and potential transaction partners under appropriate confidentiality and due-diligence controls.
• Authorities or other parties when we reasonably believe disclosure is required by law, legal process, safety, fraud prevention, rights enforcement, or protection of the Services.
• A successor in a merger, acquisition, financing, reorganisation, bankruptcy, or transfer of all or part of the business, subject to applicable notice requirements.

Published listing titles, descriptions, previews, author names, pricing, licence information, and other marked public fields can be viewed, indexed, cited, copied, or redistributed by users and search or AI services. Do not publish personal data or confidential information that should remain private.

Drafts and in-review listings are restricted to the author and authorised Kairaxis operations, subject to lawful access and security needs. A preview or source URL hosted elsewhere is governed by that host and may remain accessible independently of Kairaxis.

Kairaxis uses essential cookies and browser storage to keep sessions secure, maintain authentication, prevent abuse, preserve required interface state, and remember privacy choices. These are required for the features you request.

Kairaxis uses PostHog in always-cookieless mode by default to understand visits, page use, device and browser characteristics, referral sources, clicks, and feature interactions. The PostHog SDK does not write analytics cookies, local storage, session storage, or another persistent browser identifier in this mode. PostHog may derive a daily rotating server-side identifier from ordinary request information so activity can be counted without recognising a returning browser across days.

Google Analytics 4 (measurement ID G-6CZJWRM9G4) remains off unless you deliberately enable it through “Privacy choices.” If enabled, Google Analytics may set analytics cookies and receive page, device, referral, and interaction data. You can return to Privacy choices at any time to use cookieless PostHog only or turn analytics off completely. Your choice does not affect core marketplace use.

We do not use this site to sell personal data or for cross-context behavioural advertising. A small first-party preference value is stored only when you make a Privacy choices selection so Kairaxis can remember it.

We retain personal data only as long as reasonably necessary for the purposes above, including account operation, listing history, contractual obligations, security, disputes, tax and accounting, fraud prevention, and legal requirements. Retention varies by record type and jurisdiction.

When data is no longer needed, we delete, anonymise, or isolate it unless preservation is required by law or for a legitimate claim. Backups may retain data for a limited rolling period before secure overwrite. Public content copied by others or stored by third-party search and AI services may remain outside our control.

We use administrative, technical, and organisational measures designed for the nature of the data and risk, including encrypted transport, managed infrastructure, authentication, row-level database access controls, least-privilege permissions, and monitoring. No service can guarantee absolute security. Protect your password, use a unique credential, and report suspected compromise promptly.

Kairaxis and its providers may process data in countries other than yours. PostHog analytics is currently routed to its United States Cloud region. Where required, we use recognised safeguards such as adequacy decisions, contractual protections, or another lawful transfer mechanism. Local laws in a destination may differ from those where you live.

Depending on your location and applicable law, you may have rights to be informed; access; correct; delete; restrict or object to processing; receive portable data; withdraw consent; opt out of certain sharing, sale, or targeted advertising; and request human review of certain automated decisions. You may also complain to a competent data protection authority.

• Send a request from your account email to privacy@kairaxis.com and describe the right you want to exercise.
• We may verify identity and authority before acting. An authorised agent may need to provide proof of authority.
• We will not discriminate against you for exercising a right. Some requests may be limited by another person’s rights, legal duties, security, fraud prevention, or valid record-retention needs.
• You may unsubscribe from marketing using the message link; service, security, legal, and transaction notices may still be sent.

The Services are not directed to children under 18 and are not intended to collect their personal data. Do not create an account or submit a listing if you are under 18. If you believe a child provided personal data, contact privacy@kairaxis.com so we can investigate and take appropriate action.

We may use automated signals to detect spam, security threats, fraud, policy risk, or listing quality and to support search and ranking. Material enforcement and author-review decisions may involve human review. Kairaxis does not currently make a solely automated decision that produces legal or similarly significant effects about marketplace users; if that changes, we will provide notices and rights required by law.

We may update this Policy as services, providers, or laws change. We will post the new effective date and provide additional notice for material changes when required. Previous processing remains governed by the policy and law applicable at that time.

For privacy questions or rights requests, email privacy@kairaxis.com. Legal notices may be sent to legal@kairaxis.com. The responsible entity and physical contact address, where legally required, will be identified in the applicable account, invoice, checkout, or operator notice.