Privacy Policy

1. Information We Collect

We collect information that you provide directly to us when you register for an account, use our services, or communicate with us:

• Account Information: Your full name, email address, phone number, username, and password (stored as an encrypted hash).
• Identity Verification Data: National Identification Numbers (NIN), Bank Verification Numbers (BVN), phone numbers, and other identifiers you submit for verification purposes.
• Transaction Records: Wallet funding history, payment references, service usage records, and transaction timestamps.
• Device and Activity Data: IP addresses, browser type, operating system, login timestamps, and activity logs used for security and audit purposes.
• Payment Information: Virtual account numbers and payment references processed through our licensed payment partners (Korapay and Katpay). We do not store your full card details or banking credentials.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide identity verification services and deliver search results you request.
• To process wallet funding and manage your account balance.
• To detect, prevent, and respond to fraud, security incidents, and unauthorized access.
• To send you service notifications, security alerts (such as new login warnings), and important account updates.
• To maintain audit trails and comply with applicable Nigerian data protection regulations.
• To provide customer support and respond to your inquiries.
• To improve our services, platform performance, and user experience.

3. How We Share Your Information

We do not sell your personal information. We share data only in the following circumstances:

• Verification Partners: We transmit the identifiers you submit (NIN, BVN, etc.) to our authorized API partners (ArewaSmart, CloudEye, AgeVerify) to retrieve verification results. These partners are bound by their own privacy and data protection obligations.
• Payment Processors: Payment data is processed by Korapay and Katpay, which are licensed payment service providers operating under Central Bank of Nigeria regulations.
• Legal Compliance: We may disclose information when required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, users, or the public.
• Service Providers: We may use third-party hosting and infrastructure providers who process data on our behalf under confidentiality agreements.

4. Data Security

We implement industry-standard security measures to protect your information, including encrypted password hashing (bcrypt), CSRF protection, rate limiting on authentication endpoints, webhook signature verification, and secure session management. Access to personal data is restricted to authorized personnel only. Despite these measures, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your account information and transaction records for as long as your account is active or as needed to provide our services. Search result records and transaction logs are retained for audit and regulatory compliance purposes. If you request account deletion, we will remove or anonymize your personal data, subject to any legal retention requirements.

6. Your Rights

Under the Nigeria Data Protection Act and related regulations, you have the following rights regarding your personal data:

• Access: You can request a copy of the personal information we hold about you.
• Correction: You can update your name and phone number from your profile settings, or request correction of other data.
• Deletion: You can request deletion of your account and associated personal data.
• Objection: You can object to certain processing of your data for marketing or non-essential purposes.
• Withdrawal of Consent: You can withdraw consent for data processing at any time, though this may affect your ability to use our services.

7. Cookies and Session Management

Our platform uses essential session cookies to maintain your authentication state and security. We do not use third-party advertising or tracking cookies. Session data is stored securely and automatically expires after a defined period of inactivity.

8. Third-Party Links and Services

Our platform may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party services you interact with.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have collected data from a person under 18, please contact us immediately so we can take appropriate action.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.