Henex AI Data Processing Policy
Last updated: July 13, 2026
Scope And Roles
This Policy explains how Henex AI processes personal data when providing its AI marketing, creative, campaign, analytics, billing, support, and security services worldwide. Depending on the activity, Henex AI may act as a data controller for account and service-operation data or as a data processor for information a customer submits to a workspace. Customers remain responsible for the lawfulness of personal data they direct Henex AI to process.
Applicable Framework
Our Nigerian operations are governed by the Nigeria Data Protection Act 2023 and applicable directives of the Nigeria Data Protection Commission. Where another privacy law applies, we also honour its mandatory requirements. If requirements differ, we apply the protection required by applicable law rather than using this Policy to reduce a person's statutory rights.
Data And Purposes
We process account identity and authentication data; business, product, audience, campaign, creative, connected advertising-platform and performance data; billing and subscription records; communications; device and request metadata; and audit, safety, and fraud-prevention records. We use this information to provide and secure the service, generate requested AI outputs, operate integrations, process subscriptions, support users, comply with law, prevent misuse, and improve reliability.
Lawful Bases
We rely on the lawful basis appropriate to each purpose: performance of a contract, steps requested before a contract, compliance with legal obligations, consent where required, protection of vital interests, and legitimate interests that do not override the rights and reasonable expectations of the individual. Consent is affirmative, specific, and withdrawable. We do not treat silence or inactivity as consent.
AI And Automated Processing
Business and campaign context may be sent to approved AI providers to create strategies, copy, images, recommendations, and explanations requested through the service. Henex AI does not use solely automated processing to make employment, credit, insurance, or similarly significant legal decisions about individuals. Campaign actions that can affect spend or platform state remain subject to product controls and authorised user action.
Processors And International Transfers
We use vetted providers for hosting, databases, storage, communications, security, payments, AI, and advertising integrations. Contracts limit their processing to authorised purposes and require appropriate safeguards. Where personal data is transferred outside Nigeria or another originating jurisdiction, we use an applicable adequacy basis, contractual safeguards, consent or another lawful transfer mechanism, and document the transfer basis where required.
Individual Rights
Subject to applicable law, individuals may request access, a copy, correction, deletion, restriction, portability, or information about recipients and processing; withdraw consent; object to direct marketing or certain processing; challenge qualifying automated decisions; and complain to a regulator. We may verify identity and may retain data where another lawful obligation or defence of legal claims requires it.
Related Policies And Contact
Read our Privacy Policy, Data Retention Policy, and Security Policy. Questions, rights requests, or processor inquiries may be sent to privacy@henexai.com. Nigeria-based individuals may also contact the Nigeria Data Protection Commission.