Privacy Policy | Chiomaxx Xpress

Chiomaxx Xpress ("we", "us", "our") operates chiomaxx-xpress.com and provides bus charter services in Abuja and across Nigeria. This policy applies to anyone who visits our website, requests a quote, makes a payment, or creates an account with us.

1 Information we collect

Account information: your name, email address, phone number, and (if you choose one) a username.
Security question: a question and answer you choose, used to verify your identity for urgent account recovery. Your answer is encrypted (hashed) and is never stored or displayed as readable text — not even to us.
Booking & quote details: pickup and destination, travel dates, passenger numbers, and any notes you provide.
Payment information: payment reference numbers, amounts, and status. Card and bank details are handled directly by our payment processor (Paystack) — we never see or store your full card number.
Documents you upload: transfer receipts, IDs, or other supporting documents you choose to add to your account.
Usage information: login timestamps and whether you're currently active on the site, so our team can respond to you promptly.

2 How we use your information

To provide the transport service you've requested and manage your booking.
To process payments and issue receipts.
To communicate with you about a quote, booking, or payment — by email, phone, or WhatsApp.
To send you travel tips, offers, or event news by email — only if you've opted in, and you can opt out at any time from your account.
To keep our platform safe (preventing fraud, abuse, and unauthorised access).

3 Who we share it with

We don't sell your personal information. We share it only with the service providers that help us run Chiomaxx Xpress:

Supabase — our database, authentication, and file storage provider.
Paystack — our payment processor, for card and bank transfer payments.
Resend — our email delivery provider, for account and transactional emails.

Each of these providers is contractually restricted to using your data only to provide their service to us. We may also disclose information if required by law.

4 How we protect your information

Your password and security answer are never stored in readable form — both are one-way encrypted (hashed).
Access to your data is restricted at the database level: you can only see your own records, and only our admin account can see everyone's.
All traffic between your browser and our servers is encrypted (HTTPS).
Our admin account is protected by two-factor authentication in addition to a password.

5 Your rights & choices

Access & correction: view and update your name, phone, and username any time from your account's Profile tab.
Marketing opt-out: toggle marketing emails off any time from Profile.
Account deletion: request permanent closure of your account from Profile. We review each request — any outstanding balance or active contract needs to be settled first.
To exercise any other right over your data, contact us using the details below.

6 How long we keep your information

We keep your account information while your account is active. If your account is permanently deleted, your login and profile are erased — but your quotes, payment, and review history are kept on record (no longer linked to your name in the login system) for our accounting and legal record-keeping, consistent with standard business practice.

7 Cookies & local storage

We use your browser's local storage only to keep you signed in between visits. We do not use third-party advertising trackers or sell browsing data.

8 Children's privacy

Our services are intended for adults who can enter into a booking agreement. We don't knowingly collect information from children under 18.

9 Changes to this policy

We may update this policy from time to time. Significant changes will be reflected by an updated "last updated" date at the top of this page.

10 Contact us

Questions about this policy or your data? Email info@chiomaxx-xpress.com or message us on WhatsApp.