Legal

Privacy Policy

Last updated · May 2026

1. Who this policy is for

This Privacy Policy explains how bpay Technologies Ltd ("bpay", "we") collects, uses and protects information about you when you use the bpay app, website and related services.

2. Information we collect

  • Account info: name, phone number, email, username, profile photo.
  • Verification info: BVN, NIN and other documents required by law.
  • Transaction info: amounts, recipients, billers, timestamps, device.
  • Device info: model, OS, IP address, app version, crash reports.
  • Support info: messages, screenshots and recordings you send us.

3. How we use your information

We use your information to:

  • process payments and provide bpay's services,
  • verify your identity and prevent fraud,
  • communicate transaction receipts, security alerts and important updates,
  • improve and personalize the bpay experience,
  • comply with legal and regulatory obligations.

4. How we share your information

We share information only as needed to operate bpay:

  • Service providers: banks, telcos, billers, hosting and analytics partners that help us deliver the service.
  • Legal & regulatory: when required by law, court order or regulator request.
  • Security: to investigate fraud or protect rights and safety.

We never sell your personal information.

5. How we protect your information

We use industry-standard security including TLS encryption in transit, AES encryption at rest, PCI-DSS-compliant card handling and strict internal access controls. Our infrastructure is monitored 24/7.

6. Data retention

We keep your information for as long as your account is active and for the period required by law (typically 5 years for financial records). You may request deletion at any time, subject to legal retention requirements.

7. Your rights

You have the right to:

  • access the personal information we hold about you,
  • correct inaccurate information,
  • request deletion (subject to legal limits),
  • object to or restrict certain processing,
  • export your data in a portable format.

To exercise any right, email privacy@bpay.com. We'll respond within 30 days.

8. Cookies & tracking

Our website uses cookies and similar technologies. See our Cookie Policy for details.

9. Children

bpay is not directed at children under 18. We do not knowingly collect personal information from anyone under 18.

10. International transfers

Some of our service providers process data outside Nigeria. When this happens, we ensure appropriate safeguards (standard contractual clauses, encryption) are in place.

11. Changes to this policy

We may update this policy. Material changes will be notified by email or in-app at least 14 days before they take effect.

12. Contact us

For privacy questions or to exercise your rights, email privacy@bpay.com or write to bpay Technologies Ltd, Plot 12, Allen Avenue, Ikeja, Lagos, Nigeria.