Privacy Policy

This Privacy Policy explains how the Kairaxis entity providing the Services (“Kairaxis,” “we,” “us,” or “our”) handles personal data when you visit, create an account, save marketplace items, act as a publisher or affiliate, use an API, communicate with us, or complete a transaction. It should be read with our Terms of Service, Publisher Agreement, and Affiliate Agreement.

For processing that Kairaxis determines—such as account, marketplace, security, affiliate-attribution, and publisher-review operations—the applicable Kairaxis entity is the controller. Publishers may separately be controllers of personal data they independently collect through their products or services.

• Account and identity data: email address, authentication identifiers, session records, account status, and verification information when legally or commercially required.
• Marketplace activity: saved items, searches and filters, listing interactions, purchases, licences, support history, reports, disputes, and refund or chargeback records.
• Waitlist data: the email address, consent receipt, signup time, listing joined, and the publisher responsible for that launch list.
• Publisher data: listing drafts, delivery content, source and preview links, privacy and waitlist settings, validated advertising-platform identifiers, pricing, publisher profile and business details, review history, performance metrics, tax or payout information when paid selling is activated.
• Affiliate data: referral code, programme status, agreement acceptance, eligible offers, attributed clicks, a pseudonymous visitor hash, referring URL, attribution expiry, conversions, commission amounts, reversals, and payout status.
• Device and usage data: IP address, browser and device information, pages requested, timestamps, referring URLs, diagnostic events, security signals, and infrastructure logs.
• Communications: messages, feedback, legal notices, support requests, and information you provide when reporting content or exercising privacy rights.
• Payment data: transaction identifiers, status, amount, currency, and limited billing metadata. Payment providers generally process full card or bank credentials under their own privacy terms.

• Directly from you when you register, submit a listing, join the affiliate programme, save content, transact, communicate, or exercise a right.
• Automatically from your browser, device, affiliate links, first-party attribution cookies, and hosting or security infrastructure.
• From publishers, affiliates, payment and identity providers, fraud-prevention services, public sources, or other users when needed to operate and protect the marketplace.

• Provide accounts, authentication, saved libraries, Publisher Studio, Affiliate Hub, listing review, marketplace discovery, pre-launch waitlists, delivery, support, APIs, and transactions.
• Share a consented waitlist email with the publisher of the specific listing joined so that publisher can send launch and availability updates.
• Attribute eligible purchases, calculate and review commissions, block self-referrals and abuse, and administer publisher and affiliate payouts, reversals, taxes, refunds, and disputes.
• Perform a contract with you, take steps at your request, and administer purchases, licences, payouts, taxes, refunds, and disputes.
• Protect users and Kairaxis through access control, fraud and abuse detection, moderation, auditing, debugging, security, and enforcement.
• Comply with tax, accounting, consumer, marketplace, sanctions, anti-money-laundering, court, regulator, and other legal obligations where applicable.
• Improve usability, relevance, accessibility, performance, and reliability through aggregated or appropriately de-identified analysis.
• Communicate service, security, legal, review, and transaction updates. Marketing is sent only where permitted, and you can opt out of marketing messages.

Where a law such as the GDPR or Nigeria Data Protection Act requires a legal basis, we rely as appropriate on performance of a contract, steps requested before a contract, compliance with legal obligations, legitimate interests that are not overridden by your rights, protection of vital interests, and consent. Legitimate interests include securing and improving the Services, attributing referrals, preventing fraud, enforcing agreements, and operating a trustworthy marketplace.

When processing depends on consent, you may withdraw it prospectively. Withdrawal does not affect processing already performed lawfully. Some data is required to create an account, complete a transaction, verify a publisher or affiliate, attribute a requested referral, or meet a legal duty; without it, the relevant feature may be unavailable.

• Service providers that host infrastructure, provide authentication and databases, deliver communications, prevent abuse, analyse reliability, support users, verify identity, or process payments and payouts. They receive only data reasonably needed for their role.
• Google receives analytics events and device or usage information only after you use Privacy choices to allow Google Analytics. Google acts under its own applicable service and privacy terms and may process data internationally.
• When you separately allow publisher conversion tags, a publisher’s configured Meta, Google Ads, or TikTok tag may receive a waitlist-page view or verified signup event plus ordinary browser, device, network, page, and referral information. Kairaxis does not include your waitlist email or other entered form data in those events. Each platform processes received data under its own terms.
• PostHog receives cookieless product-analytics events through its US Cloud endpoint. Requests can include ordinary network and device information such as IP address and user agent; PostHog uses these inputs to derive a short-lived server-side identifier. We disable session recording, surveys, persistent browser identifiers, and identified profiles for ordinary marketplace browsing, and mask page text and element attributes before autocaptured events are sent.
• Publishers, affiliates, and buyers when needed to display a public listing, show programme performance, identify the contracting seller, attribute a purchase, deliver an item, provide support, or resolve a transaction. Draft delivery content and a visitor’s raw identifier are not public.
• Professional advisers, auditors, insurers, banks, and potential transaction partners under appropriate confidentiality and due-diligence controls.
• Authorities or other parties when we reasonably believe disclosure is required by law, legal process, safety, fraud prevention, rights enforcement, or protection of the Services.
• A successor in a merger, acquisition, financing, reorganisation, bankruptcy, or transfer of all or part of the business, subject to applicable notice requirements.

Published listing titles, descriptions, previews, publisher names, pricing, licence information, affiliate rates, and other marked public fields can be viewed, indexed, cited, copied, or redistributed by users and search or AI services. Do not publish personal data or confidential information that should remain private.

A publisher may mark a listing public, unlisted, or private. Unlisted pages are not intended for discovery or indexing but remain accessible to anyone with the link. Private listings have no public listing or waitlist page.

Drafts and in-review listings are restricted to the publisher and authorised Kairaxis operations, subject to lawful access and security needs. If a publisher enables a pre-launch waitlist, only the listing title, summary, category, launch message, and an optional aggregate signup count are exposed; delivery content, source details, and subscriber emails are not public. A preview or source URL hosted elsewhere is governed by that host and may remain accessible independently of Kairaxis.

Joining a waitlist is optional and requires an explicit consent checkbox. Kairaxis stores the email and consent receipt for the selected listing and makes the email available only to that listing’s publisher and authorised Kairaxis operations. Submitting the same email again does not create a second subscriber record.

Publishers must use waitlist data only for relevant launch and availability updates, protect it, honour unsubscribe and deletion requests, and comply with applicable communications and privacy law. A publisher can remove a signup in Publisher Studio. You can also request removal from the publisher or email privacy@kairaxis.com.

A pre-launch page closes automatically when the listing is published or the publisher disables the waitlist, makes the listing private, or deletes it. Existing consent records remain publisher-restricted until deleted or no longer reasonably needed.

Kairaxis uses essential cookies and browser storage to keep sessions secure, maintain authentication, prevent abuse, preserve required interface state, remember privacy choices, and honour an affiliate link that you deliberately follow. Affiliate attribution uses an opaque first-party click receipt and a random visitor token; the database receives only a one-way hash of that visitor token, not the token itself. These values are required to attribute a requested referral and expire no later than the displayed attribution period.

Kairaxis uses PostHog in always-cookieless mode by default to understand visits, page use, device and browser characteristics, referral sources, clicks, and feature interactions. The PostHog SDK does not write analytics cookies, local storage, session storage, or another persistent browser identifier in this mode. PostHog may derive a daily rotating server-side identifier from ordinary request information so activity can be counted without recognising a returning browser across days.

Google Analytics 4 (measurement ID G-6CZJWRM9G4) remains off unless you deliberately enable it through “Privacy choices.” If enabled, Google Analytics may set analytics cookies and receive page, device, referral, and interaction data.

Publisher conversion tags are a separate choice and remain off by default. If you allow them, Kairaxis loads only validated Meta Pixel, Google Ads, or TikTok Pixel identifiers on that publisher’s active waitlist page and verified thank-you page. A page-view event may run on the waitlist page and a lead event may run after a confirmed signup. You can withdraw this permission in Privacy choices at any time without affecting waitlist access or core marketplace use.

We do not use this site to sell personal data. First-party functional values are stored only for requested account, security, privacy-choice, confirmation deduplication, and affiliate-attribution features.

We retain personal data only as long as reasonably necessary for the purposes above, including account operation, listing history, contractual obligations, security, disputes, tax and accounting, fraud prevention, and legal requirements. Retention varies by record type and jurisdiction.

When data is no longer needed, we delete, anonymise, or isolate it unless preservation is required by law or for a legitimate claim. Backups may retain data for a limited rolling period before secure overwrite. Public content copied by others or stored by third-party search and AI services may remain outside our control.

We use administrative, technical, and organisational measures designed for the nature of the data and risk, including encrypted transport, managed infrastructure, authentication, row-level database access controls, least-privilege permissions, and monitoring. No service can guarantee absolute security. Protect your password, use a unique credential, and report suspected compromise promptly.

Kairaxis and its providers may process data in countries other than yours. PostHog analytics is currently routed to its United States Cloud region. Where required, we use recognised safeguards such as adequacy decisions, contractual protections, or another lawful transfer mechanism. Local laws in a destination may differ from those where you live.

Depending on your location and applicable law, you may have rights to be informed; access; correct; delete; restrict or object to processing; receive portable data; withdraw consent; opt out of certain sharing, sale, or targeted advertising; and request human review of certain automated decisions. You may also complain to a competent data protection authority.

• Send a request from your account email to privacy@kairaxis.com and describe the right you want to exercise.
• We may verify identity and authority before acting. An authorised agent may need to provide proof of authority.
• We will not discriminate against you for exercising a right. Some requests may be limited by another person’s rights, legal duties, security, fraud prevention, or valid record-retention needs.
• You may unsubscribe from marketing using the message link; service, security, legal, and transaction notices may still be sent.

The Services are not directed to children under 18 and are not intended to collect their personal data. Do not create an account or submit a listing if you are under 18. If you believe a child provided personal data, contact privacy@kairaxis.com so we can investigate and take appropriate action.

We may use automated signals to detect spam, security threats, affiliate abuse, fraud, policy risk, or listing quality and to support search, attribution, and ranking. Material enforcement, publisher-review, and affiliate-payout decisions may involve human review. Kairaxis does not currently make a solely automated decision that produces legal or similarly significant effects about marketplace users; if that changes, we will provide notices and rights required by law.

We may update this Policy as services, providers, or laws change. We will post the new effective date and provide additional notice for material changes when required. Previous processing remains governed by the policy and law applicable at that time.

For privacy questions or rights requests, email privacy@kairaxis.com. Legal notices may be sent to legal@kairaxis.com. The responsible entity and physical contact address, where legally required, will be identified in the applicable account, invoice, checkout, or operator notice.