Skip to main content
QubicboxSearch the site

Trust & Safety

Privacy notice

This notice explains how Qubicbox, including Qubicweb, Qlutterbox, Qubictry, Qubicbox Trust Badge, and E-Fraud Watch, collects, uses, stores, and protects personal data under NDPR, NDPA, and GDPR frameworks.

Version 1.0. Effective 27 August 2026.

Who we are

  • Qubicbox Limited (“Qubicbox”, “we”, “our”) operates Qubicweb, Qlutterbox, Qubictry, Qubicbox Trust Badge, and related trust tooling. We generally act as controller for direct customer and platform processing, and may act as processor only where a verified agreement requires us to process data on another controller's instructions.
  • Our registered office is 61 Ondo Street, Irawo, Mile 12, Kosofe, Lagos State, Nigeria.

Information we collect

  • Identity and verification data (names, pronouns, government IDs, certificates) required to issue badges or onboard Curators.
  • Contact details (email, phone, messaging handles) for service updates, alerts, and double-opt-in flows.
  • Incident and listing context (narratives, artefacts, inspection logs, fraud evidence, TrustOps annotations) necessary for investigations.
  • Payment and protected-payment metadata (transaction IDs, payout accounts, invoice references) captured when operating Qlutterbox or Qubictry jobs.
  • Technical telemetry (IP, device fingerprints, session identifiers, moderation audit logs, MFA events) used to secure accounts and rate-limit abuse.

Purposes & lawful bases

  • Contract: fulfilling verification, protected-payment, dispute, or content distribution services requested by you or your organisation.
  • Legal obligation: meeting a specific applicable legal, tax, payment, consumer-protection, or preservation requirement where that requirement applies to the processing.
  • Legitimate interests: preventing fraud, monitoring platform health, improving moderation accuracy, and ensuring reliable communications. Legitimate Interest Assessments are reviewed annually.
  • Consent: optional marketing updates, waitlists, referrals, or community research programmes. Withdraw consent at any time via preferences or privacy@qubicbox.com.

Retention

  • Verification dossiers and TrustOps case files: active relationship plus 5 years to support appeals and regulatory audits.
  • Fraud reports and anonymised advisories: retained indefinitely after personal identifiers are removed.
  • Evidence uploads: 24 months unless a legal hold applies, then securely deleted from primary and backup storage.
  • Audit logs and access records: 36 months minimum for accountability.
  • Marketing preferences: until withdrawn; requests honoured within 72 hours.

International transfers

  • Some approved providers may process data outside Nigeria. We assess the applicable transfer requirements, the provider's role, and appropriate safeguards before relying on a cross-border transfer. We do not represent an unverified hosting country or transfer mechanism as current fact.

How we secure data

  • Proportionate encryption, access control, session protection, and audit logging are applied according to the system and data risk.
  • Mandatory MFA for TrustOps, Curators, payout actors, and internal tooling.
  • Rate limiting, abuse prevention, and verification controls protect public and privileged workflows where implemented.
  • Evidence access is restricted and material evidence actions are recorded. Additional sanitisation controls are applied where the relevant workflow supports them.
  • Privileged access, vendors, and incidents are subject to documented governance review and exception tracking.

Sharing & processors

  • Hosting, database, storage, monitoring, and security providers receive only the data needed to provide their approved service. Provider and region details are verified before being represented as current.
  • Payment providers, including Paystack where used, process payment and payout data under their applicable provider terms. Qubicbox does not represent itself as a bank or escrow provider.
  • Approved communications providers may process contact details to deliver transactional email, SMS, messaging, and verification communications.
  • Law enforcement or regulators: only when legally compelled or necessary to prevent imminent harm. Every disclosure is logged in AuditLog.
  • We never sell personal data or allow unchecked processor sub-processing.

Your rights

  • Access, rectification, deletion, restriction, portability, and objection to processing based on legitimate interests.
  • Withdrawal of consent without affecting prior lawful processing.
  • Applicable rights to lodge a complaint with the Nigeria Data Protection Commission or another competent authority.
  • EU/EEA residents may also contact their local supervisory authority.

Exercising rights

  • Submit a request via privacy@qubicbox.com with the subject “Data Subject Request”.
  • Include identifiers (account email, phone number, ticket ID) so we can verify ownership. Responses are issued within one working day and fulfilled within 30 days unless complexity requires an additional 15 days.
  • Registered office: Qubicbox Limited, 61 Ondo Street, Irawo, Mile 12, Kosofe, Lagos State, Nigeria. Telephone: +234 1 700 2100.

Product-specific notes

  • Qubicweb & E-Fraud Watch: community submissions are reviewed and anonymised before publication. Reporters can stay anonymous; personal contact details remain private.
  • Qlutterbox & Qubictry: protected-payment payouts and Guild member access require verified identity and payout details to comply with NDPR and financial regulations.
  • Qubicbox Trust Badge: verification results, references, provenance, and necessary audit metadata are retained according to the approved schedule. Raw identity evidence is minimised where those records are sufficient, subject to legal holds and implemented deletion controls.

Updates

  • We review this notice quarterly or whenever regulations, processors, or product scope changes. Updated versions appear here with a new revision date.
  • Latest revision: 27 August 2026.
Checking your session. We will reconnect automatically.
Privacy Notice - Qubicbox