SalariePrivacy Policy
Salarie (salarie.app) · operated by Xandee Tech LTD Last updated: 5 October 2026 · Version 1.0
In short
Xandee Tech LTD runs Salarie, a platform that lets a business pay all its staff in one transaction. We collect account details from business owners and, through them, payment details of their employees. We use this data only to run the Platform, process payments, prevent fraud and meet legal duties. We do not sell personal data, show advertising, send marketing messages or train AI models on your data. You may exercise your rights by writing to legal@xandee.tech.
1. Who we are
Xandee Tech LTD ("Xandee", "we", "us") operates the Salarie mobile application and the website at salarie.app (together, the "Platform").
- Registered address: Benson Abam Street, Lemna, Calabar
- Contact for all privacy matters: legal@xandee.tech
- Data protection registration:
See Certification here
2. Who this policy covers
This policy applies to two groups:
- Business Users — business owners and their authorised representatives who register on the Platform.
- Payees — employees or other individuals whom a Business User pays through the Platform. Payees do not create accounts and never log in. Their details are entered into the Platform by the Business User.
This policy does not cover Xandee's own staff or job applicants, who are given a separate notice.
3. Our role
- For Business User data, Xandee decides how and why the data is used. Xandee is the data controller.
- For Payee data, the Business User decides to pay the Payee and supplies the Payee's details. We process that data to carry out the Business User's payment instruction. We also use limited Payee data for our own purposes of fraud prevention, record-keeping and legal compliance, and for those purposes we act as a data controller.
4. Personal data we collect
| Category | Data | Whose | How we collect it |
|---|---|---|---|
| Account and identity | Name, email address, phone number | Business Users | Directly from the Business User |
| Business details | Business name and business details entered at registration | Business Users | Directly from the Business User |
| Sign-in data | Email-and-password credentials, or Google sign-in identifiers | Business Users | Directly from the Business User, or through Google when they choose Google sign-in |
| Payee payment details | Full name, bank name, account number, payment amount, job title
[GAP — confirm before publishing: do you also collect Payee phone number and email address? If yes, add them here]
|
Payees | From the Business User, who enters them |
| Transaction records | Batch details, amounts paid, payout status, refunds, timestamps | Both | Generated by the Platform and reported to us by our payment processor |
| Communications | Your email address and the content of service emails we send you (for example payment confirmations and failed-payment notices) | Business Users | Generated by us and sent through our email provider |
| Technical logs |
none
|
Business Users | Automatically |
We do not collect: precise location data, or analytics or advertising data about how you use the Platform.
5. Why we use personal data and our legal basis
| Purpose | Data used | Proposed legal basis |
|---|---|---|
| Create and secure Business User accounts | Account, sign-in data | Performance of our contract with the Business User |
| Process batch payments, retries, refunds and reversals | Payee payment details, transaction records | Performance of our contract with the Business User; the Business User's instruction on behalf of the Payee's payment |
| Send service and security emails, including failed-payment notices | Account data, transaction records | Performance of our contract; legitimate interest in keeping users informed |
| Prevent fraud, misuse and money laundering; investigate disputes | All categories above | Legitimate interest in protecting the Platform and users; compliance with legal obligations |
| Keep records and comply with law | Transaction records, account data | Compliance with legal obligations |
We do not use personal data for marketing. We do not send marketing emails or SMS messages.
6. Who we share personal data with
We share personal data only with the service providers needed to run the Platform:
| Recipient | Purpose | Data shared |
|---|---|---|
| Korapay (payment processor) | Receive the Business User's payment and send payouts to Payees' bank accounts; process refunds | Payee name, bank name, account number, amounts, transaction references, and Business User details needed to process payment |
| Google / Firebase (hosting, database and sign-in) | Store Platform data and authenticate Business Users who sign in with Google | All categories of data stored on the Platform; sign-in identifiers |
| Resend (email delivery) | Deliver service emails | Business User email address and the content of the emails |
We may also disclose personal data where required by law, court order or a competent regulator, or to protect our legal rights. If Xandee is merged with or acquired by another business, personal data may be transferred to the successor, which will be bound by this policy until it gives notice of any change.
We do not sell personal data and we do not share it for advertising.
7. Transfers outside Nigeria
Some of our providers (such as Google/Firebase and Resend) may process data on servers outside Nigeria.
8. How long we keep personal data
We keep personal data for ninety (90) days after deletion of account after which we delete or anonymise it.
When a Business User deletes a staff record that is linked to payment records, the record is hidden but retained in a restricted state, and is removed at the end of the retention period.
9. Security
We use reasonable administrative and technical safeguards to protect personal data, including encryption and sign-in through email-and-password or Google authentication. No system is completely secure, and we cannot guarantee absolute security.
If a breach affects your personal data, we will notify affected persons and the Nigeria Data Protection Commission as required by applicable law.
10. Your rights
Subject to applicable law, you may ask us to:
- confirm whether we hold your personal data, and give you access to it;
- correct inaccurate or incomplete data;
- delete your data where we have no legal reason to keep it;
- restrict our use of your data, or object to processing based on our legitimate interests;
- give you your data in a portable format; and
- stop processing that depends on your consent (where we rely on consent), without affecting earlier processing.
To exercise a right, email legal@xandee.tech. We may ask you to verify your identity first. We will respond without undue delay and in any event within the time required by law.
Payees: if you believe your details are wrong, you may contact us directly or contact your employer, who entered them. We may refer your request to your employer, who controls the accuracy of the payment details.
11. Complaints
If you are unhappy with how we handle your personal data, please contact us first at legal@xandee.tech. You also have the right to complain to the Nigeria Data Protection Commission (NDPC).
12. Children
The Platform is not intended for persons under 18 years old, and we do not knowingly collect their personal data through the Platform. If you believe a person under 18 has registered, contact legal@xandee.tech and we will delete the data.
13. Cookies and similar technologies
We use analytics and advertising trackers. These help us understand how users interact with the Platform and improve our services. We also mandatory use cookies and similar technologies for essential Platform functions, such as maintaining user sessions and ensuring security.
14. No AI training
We do not use personal data processed on the Platform to train artificial intelligence models.
15. Business User responsibilities
Business Users must have a lawful right to give us their employees' details and must tell their employees that those details are shared with us and our providers for payment. The Terms and Conditions set out these duties.
16. Changes to this policy
We will update the "Last updated" date above whenever this policy changes. For material changes we will notify Business Users by email or in-app notice before the change takes effect. We will not apply a material change retroactively to data already collected without a lawful basis for doing so.
17. Contact
Xandee Tech LTD Benson Abam Street, Lemna, Calabar Email: legal@xandee.tech