Privacy Policy

1. Introduction

NivoltPay Technologies Ltd ("NivoltPay", "we", "us", or "our"), incorporated under the laws of the Federal Republic of Nigeria (RC 7349182), is committed to safeguarding the privacy and personal data of our users, agents, and merchants. This Privacy Policy describes how we collect, process, store, and protect your information when you access our website, VTU web portals, mobile applications, and wallet services in accordance with the Nigeria Data Protection Act (NDPA) 2023.

2. Information We Collect

To enable secure financial transactions, fulfill statutory KYC (Know Your Customer) requirements, and prevent illicit activities, we collect:

• Account & Profile Data: Full name, verified mobile phone number, email address, physical business address, and cryptographic password hashes (bcrypt/argon2).
• Identity & KYC Verification: Bank Verification Number (BVN), National Identification Number (NIN), and identity documentation required solely for Tier-2 and Tier-3 agent validation and CBN/AML compliance. Sensitive identifiers are transmitted via encrypted protocols and never shared for marketing.
• Financial & Transaction Data: Active wallet balances, funding references, Paystack transaction identifiers, bank transfer confirmation codes, utility meter numbers, and commission logs.
• Technical & Log Data: IP address, device fingerprints, browser version, access timestamps, and session security tokens to prevent account hijacking and duplicate debits.

3. How We Use Your Information

• To process your digital vending requests for airtime, data bundles, electricity tokens, cable TV, and exam PINs.
• To maintain your electronic wallet ledger, settle commissions, and reconcile refunds.
• To comply with regulatory anti-money laundering (AML) and counter-terrorist financing (CTF) mandates.
• To detect, investigate, and prevent fraudulent transactions, automated scraping, or unauthorized access.
• To deliver critical transaction receipts, real-time security alerts, and system notices via SMS, WhatsApp, or email.

4. Data Sharing & Third-Party Disclosures

We do not sell, rent, or monetize your personal data. We only share the strictly necessary data with licensed financial and infrastructure partners to complete the transactions you authorize:

• Telecommunication Providers: MTN Nigeria, Airtel, Globacom, and 9mobile for VTU routing.
• Payment Gateways & Banks: Paystack (PCI-DSS Level 1 compliant) and licensed partner commercial banks for dedicated virtual account issuance and card processing.
• Regulatory & Law Enforcement Bodies: Only when legally required by a valid court order or statutory directive under Nigerian law.

5. Data Security & Encryption Standards

We employ multi-layered technical safeguards including 256-bit TLS/SSL transport encryption, strict role-based internal access controls, database salting and hashing, and real-time transaction monitoring to preserve the integrity and confidentiality of your information.

6. Your Rights Under the NDPA

Under the Nigeria Data Protection Act, you have the right to request access to the personal data we hold about you, request rectification of inaccurate records, or request closure of your account (subject to statutory financial transaction record retention mandates). For inquiries, contact our Data Protection Officer at support@nivoltpay.com.