Data Protection & NDPR Compliance Statement

Privacy Policy & Optical Telemetry Governance

Last Updated: March 2026 • Compliant with Nigeria Data Protection Act (NDPA) & Global Privacy Standards

1Commitment to User Data Privacy & Protection

At Xelfuel (Lesous Technologies Limited • RC-1871960), we respect and safeguard the fundamental privacy rights of all customers, independent field runners, and partner stations. This policy explains how information is collected, processed, and secured within our Progressive Web Application (PWA).

2Categories of Information We Collect

To execute secure fuel dispatches, cylinder scale verification, and automotive service bookings, we process:

Personal Identifiers

Full Name, Verified Phone Number, Email, Profile Avatar, and Delivery Address coordinates.

GPS Geolocation Telemetry

Live driver/runner telemetry and destination pin coordinates used solely during active dispatches.

Financial & Ledger Records

Immutable XelWallet debits/credits, Paystack references, and Moniepoint MFB transfer records.

Optical Proofs & Biometrics

LPG Proof-of-Scale photos, Runner Proof-of-Life face liveness scans, and badge verification snapshots.

3Camera Usage, Proof-of-Scale & Biometric Governance Policy

Xelfuel utilizes camera access strictly for verifiable operational checkpoints and anti-fraud verification:

LPG Cooking Gas Proof-of-Scale Photos

Runners capture a clear optical photo of the weighing scale showing cylinder tare weight and gross weight. This photo is linked directly to the order and viewable by both customer and admin to eliminate gas volume discrepancies.

Runner Proof-of-Life & Face Liveness

Runners undergo automated face liveness scans (blink/smile detection) to confirm identity and prevent unauthorized credential sharing. Biometric facial embeddings are computed on-device and never sold or shared with third parties.

Customer Doorstep Badge Inspection

Customers may capture a quick photo verification of the runner's face and badge at the doorstep. This photo is stored in the order security record to protect both the customer and the runner from impersonators.

4Scheduled Video Consultation Rooms & WebRTC Privacy

Xelfuel provides scheduled video diagnostic consultations powered by Daily.co WebRTC technology under the following privacy guarantees:

Zero Cloud Recording: Video and audio streams are end-to-end encrypted WebRTC peer streams. No conversation audio, video, or screen content is recorded or stored on any server.
Ephemeral Meeting Channels: Consultation rooms exist only for the scheduled session duration (up to 30-60 minutes) and are permanently decommissioned immediately upon call termination.
Non-Intrusive Notifications: Automated appointment dispatch uses secure WhatsApp (wa.me) links and transactional email without spamming.

5Data Retention, Encryption & Security Architecture

We implement enterprise-grade security controls to protect your data across all lifecycle stages:

Transport & Rest Encryption: TLS 1.3 encryption for all data in transit; AES-256 encryption for data stored in PostgreSQL databases.
PostgreSQL Row-Level Security (RLS): Strict database access policies ensure users and runners can only access their own authorized records.
Retention Schedules: Order receipts and tax invoices are retained for mandatory statutory periods (6 years under Nigerian tax law); transient location telemetry is purged after order completion.

6Your Data Subject Rights & Data Protection Officer Contact

Under the Nigeria Data Protection Act (NDPA), you hold the right to request access to your personal data, rectify inaccurate records, or request complete account deletion. To exercise these rights:

Data Controller: Lesous Technologies Limited (RC-1871960)

Data Protection Officer (DPO): dpo@lesous.ng / privacy@lesous.ng

Support & Privacy Desk: support@lesous.ng

About Xelfuel•Terms of Service