Privacy Policy

This Privacy Policy explains how AFRIKARS collects, uses, shares, and protects information when you use our cross-border vehicle marketplace, website, and related services (the "Platform"). It also explains the choices and rights you have regarding your information.

Plain-language summary. We collect the information needed to verify who you are (as required by law for a financial and cross-border commerce platform), to operate the marketplace, and to keep the Platform secure. Identity documents you submit for verification are handled by our specialist verification partner and are not retained in raw form on our own systems. We do not sell your personal information. You have rights over your data, described in Section 11.

Contents

Who we are
Scope of this policy
Information we collect
Identity verification (KYC / KYB)
How we use your information
Legal bases for processing
Cookies & tracking technologies
How we share information
International data transfers
Data retention
Your rights & choices
Data security
Children's privacy
Third-party links & services
Changes to this policy
Regional disclosures
How to contact us

1. Who we are

The Platform is operated by AFRIKARS Inc., a Delaware corporation ("AFRIKARS," "we," "us," or "our"), together with its affiliates including AFRIKARS Motors LLC (United States) and AFRIKARS Ltd (Nigeria). For the purposes of applicable data protection law, AFRIKARS Inc. acts as the controller of personal data processed through the Platform, and its affiliates process personal data on its behalf where relevant to their role in the transaction.

Where local law requires, the AFRIKARS affiliate operating in your jurisdiction may act as a joint or local controller. Our contact details are in Section 17.

2. Scope of this policy

This policy applies to personal data we process when you:

visit or browse our website and applications;
create an account, list a vehicle, or place or fund an order;
complete identity or business verification;
communicate with us or use our support channels; or
otherwise interact with the Platform.

It does not apply to third-party websites, products, or services that we do not control, even where we link to them (see Section 14).

3. Information we collect

We collect the categories of information below, depending on how you use the Platform.

Information you provide to us

Category	Examples
Account & profile	Name, email address, phone number, password, country, and role (buyer, seller, dealer).
Identity & verification (KYC)	Government-issued ID, photograph or selfie, date of birth, address, and other data required to confirm your identity. See Section 4 for how this is handled.
Business verification (KYB)	For business users: company registration details, ownership/beneficial-owner information, business documents, and details of authorized representatives.
Transaction & wallet	Orders, listings, vehicle and shipping details, wallet balances and staged milestone approvals, invoices, and records relating to funds you deposit, hold, or release on the Platform.
Communications	Messages you send us or other users, support requests, and feedback.

We do not directly collect or store full card numbers, bank credentials, or similar payment secrets. Payments are handled by our regulated payment partners (see Section 8), who process that data under their own terms.

Information we collect automatically

When you use the Platform we automatically collect certain technical and usage information, including device and browser type, IP address, approximate location derived from IP, pages viewed, referring/exit pages, timestamps, and interactions with listings and features. We collect this using cookies and similar technologies (see Section 7).

Information we receive from third parties

We receive information from identity-verification, payment, fraud-prevention, vehicle-data, and analytics providers. For example, our verification partner returns the result of a verification check, and vehicle-history providers return report data associated with a vehicle identification number (VIN).

4. Identity verification (KYC / KYB)

Because AFRIKARS facilitates cross-border commerce and the movement of funds, we are required to verify the identity of our users and the legitimacy of business accounts. To do this we use Sumsub, a specialist identity-verification provider, and may use other regulated verification and screening services.

How your identity documents are handled. When you submit identity or business documents for verification, those documents are collected and processed by our verification partner within its own secure environment. AFRIKARS does not retain copies of your raw identity documents (such as passport or driver's-license images) on its own systems. What we retain is the outcome of the check — for example, whether verification passed or failed, the verification reference, and the limited identity attributes we are legally required to keep, such as your verified name and country.

Our verification partner processes this data as our processor and under its own privacy terms. We encourage you to review Sumsub's privacy notice for details of how it handles verification data. We use verification results only to confirm identity, prevent fraud and money laundering, and meet our legal and regulatory obligations.

5. How we use your information

We use personal data to:

create and manage your account and provide the Platform;
verify your identity and eligibility, and screen for fraud, money laundering, and sanctions risk;
process, facilitate, and record transactions, including staged wallet deposits and releases;
communicate with you about your account, transactions, and support requests;
operate, maintain, secure, and improve the Platform and develop new features;
personalize and improve the quality of your experience, including relevant listings and recommendations;
measure and analyze usage so we can improve service quality;
send you service messages and, where permitted, marketing you can opt out of; and
comply with legal obligations and enforce our terms.

6. Legal bases for processing

Where data protection law requires a legal basis (for example, under the Nigeria Data Protection Act 2023 or, where applicable, the EU/UK GDPR), we rely on one or more of the following: performance of a contract with you; compliance with a legal obligation (including identity-verification and anti-money-laundering requirements); our legitimate interests in operating, securing, and improving the Platform; and your consent, where we ask for it (for example, for certain cookies or marketing). Where we rely on consent, you may withdraw it at any time.

7. Cookies & tracking technologies

We use cookies and similar technologies (such as local storage and pixels) to run the Platform, remember your preferences, keep you signed in, secure your session, and understand how the Platform is used so we can improve quality of service.

Type	Purpose
Strictly necessary	Enable core functions such as sign-in, security, and session management. These cannot be switched off.
Functional	Remember your settings and preferences to improve your experience.
Analytics / performance	Help us understand how the Platform is used so we can improve it.
Marketing	Used, where enabled, to measure and improve the relevance of our communications.

You can control non-essential cookies through our cookie banner or settings, and through your browser controls. Blocking some cookies may affect how the Platform works. Where required by law, we set non-essential cookies only with your consent.

We do not sell your personal information. We share it only as described here:

Service providers (processors) who help us operate the Platform under contract, including identity verification (Sumsub), payment processing, cloud hosting and infrastructure, vehicle-data and pricing providers, monitoring and analytics, and communications tools.
Other users, as needed to complete a transaction — for example, limited details shared between a buyer and seller to arrange a sale, shipment, or delivery.
Payment and financial partners to process deposits, transfers, and payouts related to your transactions.
Regulators, authorities, and advisors where required by law, to comply with legal process, or to protect our rights, users, and the integrity of the Platform.
In a corporate transaction, such as a merger, acquisition, financing, or reorganization, subject to appropriate protections.

We require our service providers to protect personal data and to use it only for the purposes we specify.

9. International data transfers

AFRIKARS operates across the United States, Nigeria, and other markets, so your personal data may be transferred to and processed in countries other than your own, including the United States and Nigeria. These countries may have data protection laws that differ from those in your location. Where we transfer personal data internationally, we take steps to ensure it remains protected in line with this policy and applicable law, including using appropriate safeguards such as contractual protections with the parties receiving the data.

10. Data retention

We keep personal data only for as long as needed for the purposes described in this policy, and then delete or anonymize it. Retention periods depend on the type of data and the reason we hold it — for example, we retain transaction and verification-outcome records for the periods required by financial, tax, and anti-money-laundering laws, which may extend beyond the closure of your account. Where data is no longer required, we securely delete or de-identify it.

11. Your rights & choices

Subject to applicable law, you may have the right to:

access the personal data we hold about you;
correct inaccurate or incomplete data;
delete your data, where no legal obligation requires us to keep it;
object to or restrict certain processing;
withdraw consent where we rely on it;
data portability, where applicable; and
lodge a complaint with your data protection authority — in Nigeria, the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, contact us using the details in Section 17. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law.

12. Data security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, and alteration — including encryption in transit, access controls, monitoring, and the use of vetted providers for sensitive processing such as identity verification and payments. No system is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond promptly to any incident as required by law.

13. Children's privacy

The Platform is intended for adults and is not directed to children. We do not knowingly collect personal data from anyone under the age of 18 (or the age of majority in your jurisdiction). If you believe a minor has provided us with personal data, please contact us and we will take appropriate steps to delete it.

14. Third-party links & services

The Platform may link to or integrate third-party websites and services, including verification, payment, shipping, and vehicle-data providers. Their handling of your information is governed by their own privacy policies, not this one. We encourage you to review those policies before providing information to them.

15. Changes to this policy

We may update this policy from time to time to reflect changes in our practices, technology, or the law. When we make material changes, we will update the "last updated" date above and, where required, notify you. Your continued use of the Platform after an update means you accept the revised policy.

16. Regional disclosures

Nigeria (NDPA 2023)

If you are in Nigeria, we process your personal data in accordance with the Nigeria Data Protection Act 2023 and applicable regulations. You have the rights described in Section 11, and you may contact us (Section 17) or lodge a complaint with the Nigeria Data Protection Commission.

United States

Depending on your state of residence, you may have rights to access, delete, correct, and opt out of certain processing of your personal information. We do not sell personal information. To exercise applicable rights, contact us using the details in Section 17.

EEA / United Kingdom

If you are in the EEA or UK, the legal bases in Section 6 apply, you have the rights in Section 11, and you may complain to your local supervisory authority. International transfers are handled as described in Section 9.

17. How to contact us

If you have questions about this policy or how we handle your personal data, or if you wish to exercise your rights, contact us:

Email: legal@afrikars.com
Data protection contact: N/A
Entity: AFRIKARS Inc.