Privacy notice
Last updated 16 October 2026
Lubritex Limited (“we”) runs the Lubritex ERP and its free public tools. This notice explains what personal data we handle and why, in line with the Nigeria Data Protection Act 2023.
What we collect
- Account data: your email address, password (stored only as a secure hash by our sign-in provider) and, if you turn it on, your two-step sign-in set-up.
- Business records your company enters: names, phone numbers and emails of customers, contacts, drivers and staff, plus trip photos and their location and time.
- Website enquiries: the name, company, phone, email and message you send through a public tool’s contact form.
- Security logs: sign-ins, file openings and changes made through the AI assistant, to protect your account and investigate misuse.
Why we use it
- To provide the service your company signed up for (contract).
- To answer enquiries you send us (your request / legitimate interest).
- To keep the service secure and meet legal obligations, such as tax records.
We do not sell personal data and do not use it for advertising.
Who processes it for us
- Supabase (database, sign-in and file storage, hosted in London, United Kingdom).
- Vercel (web hosting).
- Anthropic (the AI assistant and photo reading, only when someone in your company uses them). Anthropic does not train its models on this data.
- OpenAI (used instead of Anthropic for the AI assistant and photo reading while it is switched on as a temporary fallback). Data sent through OpenAI’s API is not used to train its models by default.
These providers process data on our instructions under their data-processing terms. Where data leaves Nigeria, we rely on those terms as the transfer safeguard.
How long we keep it
Business records are kept while your company uses the service and as long as Nigerian tax and company law require afterwards. Website enquiries are kept for up to two years unless they become a customer relationship.
Your rights
You can ask to see, correct, export or delete your personal data, or object to how we use it, by writing to admin@lubritexng.com. If you are not satisfied with our answer, you may complain to the Nigeria Data Protection Commission.
Security
Data is encrypted in transit and at rest, every company’s data is isolated by the database, staff can use two-step sign-in, and files open only through short-lived, logged links.