MRX Exchange
Sign In Sign Up Get App
For Buyers For Sellers About Us Reach Us / Contact Sign In Create Account
Download App on Google Play

Privacy Policy

APPLICATION: MRX EXCHANGE (com.mrxexchange.app) • LAST UPDATED: OCTOBER 17, 2026

This Privacy Policy governs the manner in which MRX Exchange ("we", "us", or "our") collects, uses, maintains, and discloses personal data collected from users ("User", "you") of the MRX Exchange mobile application and web platform located at https://mrxexhanges.com. We are committed to safeguarding your privacy in compliance with the Nigeria Data Protection Act (NDPA) and Google Play Developer Policies.

1. Information We Collect

We collect information necessary to provide peer-to-peer escrow services, automate airtime/data trades, and satisfy regulatory anti-money laundering (AML) and customer identification requirements:

  • Personal Identifiers: Legal full name, email address, and mobile phone number provided during account registration.
  • Identity Verification (KYC Data): Bank Verification Number (BVN) or National Identity Number (NIN). Under Central Bank of Nigeria (CBN) regulatory frameworks, this information is strictly utilized to authenticate your financial identity and generate dedicated virtual bank accounts with our licensed infrastructure banking partner (9PSB via BillStack).
  • Financial & Transaction Details: Wallet balances, transaction timestamps, order references, beneficiary bank accounts for withdrawals, and recipient phone numbers for airtime or data recharges.
  • Device & Technical Information: Device hardware model, operating system version, unique device identifiers, IP address, and Google Firebase Cloud Messaging (FCM) / Expo push notification tokens for security and transaction alerts.

2. How We Use Collected Information

Your data is processed strictly for legitimate operational purposes:

  • To execute peer-to-peer escrow transactions and secure buyer/seller funds programmatically.
  • To issue automated dedicated virtual bank account numbers for wallet deposits.
  • To fulfill telecommunications recharge orders (Airtime and Data Bundles) across MTN, Airtel, Glo, and 9mobile.
  • To authenticate login sessions and protect accounts against unauthorized access or fraud.
  • To transmit real-time transactional push notifications and receipt emails.
  • To resolve trade arbitration disputes between buyers and sellers.
  • To comply with legal obligations, financial audit requirements, and CBN guidelines.

3. Third-Party Services & SDK Disclosures

In accordance with Google Play Developer Policies, we disclose that the MRX Exchange mobile application integrates trusted third-party SDKs and service providers to deliver core application functionality:

  • Google Firebase Authentication: Used for secure user sign-in and tokenized credential management.
  • Google Firebase Cloud Messaging (FCM) & Expo Notifications: Used to dispatch real-time payment alerts, order completion notices, and security notifications.
  • BillStack Technologies: Used as our payment infrastructure partner to generate Central Bank of Nigeria licensed 9PSB dedicated virtual bank accounts and process automated payment webhook notifications.
  • Payrant & SMEPlug APIs: Telecommunications gateway providers utilized solely for dispatching programmatic airtime and data bundles to target recipient numbers.

We do not sell, rent, or trade your personal information to marketing advertisers or third-party brokers.

4. Data Storage, Encryption & Security

We implement stringent technical and organizational security controls to protect your data:

  • Encryption in Transit: All communications between your mobile device and our backend servers are secured using Transport Layer Security (TLS 1.3 / HTTPS).
  • Encryption at Rest: Sensitive data fields, identity records, and authentication credentials are encrypted using industry-standard AES-256 encryption. Passwords and transaction PINs are stored as salted, non-reversible cryptographic hashes (Bcrypt / Argon2).
  • Access Controls: Access to user data is strictly limited to authorized security personnel with mandatory multi-factor authentication (MFA).

5. Data Retention Policy

We retain personal information only for as long as your account remains active or as required by statutory law:

  • Profile data, active device tokens, and session credentials are retained during your active account lifecycle.
  • In compliance with the Money Laundering (Prevention and Prohibition) Act and Central Bank of Nigeria regulations, financial transaction records and ledger logs must be retained in archived, anonymized form for a statutory period of five (5) to six (6) years following transaction completion.

6. Account Deletion & Right to Be Forgotten

You have the absolute right to request the deletion of your account and associated personal data at any time:

Upon receipt of your verified deletion request, your profile, authentication credentials, KYC documentation, and device tokens will be permanently deleted from our active databases within 72 hours.

7. Children's Privacy

MRX Exchange is strictly intended for individuals aged eighteen (18) years or older. We do not knowingly solicit or collect personal information from minors under the age of 18. If we discover that a minor has created an account, we will immediately terminate the account and purge all associated personal information.

8. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in our legal obligations or application features. When revised, the "Last Updated" timestamp at the top of this page will be updated. Continued use of MRX Exchange following any modifications signifies your acceptance of the revised terms.

9. Contact & Data Protection Officer

If you have any questions, inquiries, or grievances regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer: