Last updated: 27 October 2026
This policy explains what personal information Oxi Group Limited ("Oxi", "we") collects when you use our sites and apps, why we use it, who we share it with, and the choices you have. It covers oxi-group.com, Oxi Market (oxi-market.com), OxiSeller (oxiseller.com), Oxi shops (oxishops.com), OxiAgro, Oxi Dispatch and OxiRider, Membergate (membergate.org), OxiAi (oxiai.africa) and the Oxi sign-in service at id.oxi-group.com ("the Oxi platform"). One Oxi account works across all of them.
Who is responsible for your information
Oxi Group Limited, Lagos, Nigeria, is the data controller for information collected on the Oxi platform. Where a group, association, church, school or market runs its own space on Membergate, that organisation is responsible for the member records it keeps there, and Oxi processes them on its behalf.
What we collect
- Account details: your phone number and/or email address, your name, and the details you add to your profile (such as your state, local government area and the roles you trade in).
- Sign in with Google: if you choose "Continue with Google", Google shares your name, your email address and a Google account identifier with us. We do not receive your Google password, contacts, files or any other Google data.
- Identity verification: before you can trade, post, message other parties or move money, we ask for a live selfie, your full name and address, and an official identity document. We use these only to confirm who you are and to prevent fraud.
- Trading and orders: listings, offers, requests, contracts, orders, invoices, payments, ratings and messages you send through the platform.
- Payments and payouts: the payout bank account you add (stored encrypted, shown only as its last four digits) and records of payments. Card details are handled by our payment partners, not stored by Oxi.
- Deliveries: pickup and delivery addresses, and the location of the phone or device that scans a handover code.
- Technical information: sign-in sessions, the device and browser you use, and basic logs that keep the service secure and working.
Why we use it
- To create your account, sign you in (including across Oxi sites) and keep your account secure.
- To verify identities and protect buyers, sellers, farmers and carriers from fraud.
- To run the trades, orders, payments, escrow and deliveries you ask for.
- To send you sign-in codes and service messages by WhatsApp, SMS or email.
- To provide support, resolve disputes and improve the platform.
- To meet our legal and regulatory obligations.
We rely on the contract with you to provide the service, your consent (which you can withdraw at any time), our legal obligations, and our legitimate interest in keeping the platform safe, as allowed by the Nigeria Data Protection Act 2023 and other applicable law.
Who we share it with
- Other parties to your trade: by default, everyone on Oxi trades under a nickname. Your real name and contact details are shared only with parties you choose to trust, and every such release is logged.
- Service providers who help us run the platform, under contract and only for that purpose: message delivery (WhatsApp, SMS and email providers), payment processors and partner banks, cloud hosting, and Google for "Continue with Google".
- Certifiers, labs, insurers and lenders you choose to work with on the platform, limited to what they need for that service.
- Authorities where the law requires it.
We do not sell your personal information.
Where your information is kept
The Oxi platform is hosted on servers in Lagos, Nigeria. If information has to be transferred outside Nigeria (for example, to a service provider), we do so only with the safeguards the law requires.
How long we keep it
We keep your information for as long as your account is open and afterwards only as long as needed for the purposes above, such as resolving disputes, keeping financial and trade records required by law, and preventing fraud.
Your rights
You can ask to see the information we hold about you, correct it, delete it, receive a copy of it, object to or restrict how we use it, and withdraw any consent you gave. You can also ask us to unlink Google from your account. To make a request, contact us at oxi-group.com/contact.html. If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission, or to the data protection authority where you live.
Security
Sign-in uses one-time codes rather than passwords, with optional two-step sign-in using an authenticator app. Sensitive details such as bank account numbers are encrypted, and access is limited to staff who need it.
Cookies
We use cookies to keep you signed in, to carry your sign-in between Oxi sites, and to remember your choices. We do not use third-party advertising trackers.
Children
The Oxi platform is for people aged 18 and over. We do not knowingly open accounts for children.
Changes to this policy
We will post any changes on this page and update the date above. If a change is significant, we will tell you on the platform before it applies.
Contact
Oxi Group Limited, Lagos, Nigeria. Contact us at oxi-group.com/contact.html, or use the Oxi Support chat on any Oxi site.