Privacy Policy

1. Who is responsible for your data

QUAVOX TECHNOLOGIES LTD (RC 9906297) is the data controller. House 11 Okonkwo Compound, Lane opposite St. Gabriel's Catholic Church, Igbuala, Ifitedunu, Anambra State, Nigeria. Email: paydersolu@gmail.com. Write to us at that address for any privacy request.

2. Data we collect

• Account data: first and last name, email address, phone number, password (stored only as a one-way hash), and your transaction PIN (also hashed).
• Identity (KYC) data: date of birth, address, and your Bank Verification Number (BVN) and, where required, National Identification Number (NIN). These are used only to verify who you are. Sensitive identifiers are encrypted at rest.
• Transaction data: wallet funding, transfers, withdrawals, bill, airtime, data, betting-wallet and exam-pin purchases, amounts, fees, beneficiaries (for example a meter number, phone number or bank account), receipts and status.
• Bank details you give us: the account number and bank you withdraw to, and the account name returned by the bank.
• Device and usage data: a random device identifier, app version, IP address, log-in times and security events, used to protect your account and detect fraud.
• Support data: messages and attachments you send to customer care.
• Payment data: card payments are handled by our payment partner Paystack. We never see or store your full card number, expiry date or CVV.

3. Why we use your data

• To create and run your account and wallet, and carry out the transactions you ask for (contract).
• To verify your identity, apply transaction limits and meet anti-money-laundering, counter-terrorism-financing and know-your-customer duties (legal obligation).
• To prevent fraud, secure your account and investigate disputes (legitimate interest and legal obligation).
• To send you transaction receipts, security codes and service messages (contract).
• To provide customer support and improve the service (legitimate interest).
• To send marketing only if you have agreed; you can withdraw consent at any time.

4. Who we share data with

We do not sell your personal data. We share it only as needed with:

• Payment and banking partners (such as Paystack) to receive money, issue your dedicated account number, verify your BVN and bank account, and pay out withdrawals.
• Service providers that deliver what you buy (airtime, data, TV, electricity, betting-wallet funding, exam pins) – we pass only the details needed, for example a phone or meter number and amount.
• Infrastructure and communications providers that host our systems, send email and SMS, and help us monitor errors, under contracts that require them to protect your data.
• Billers you choose to pay through PAYDER, who receive the payment details you submit.
• Regulators, law enforcement and courts when the law requires it.
• A buyer of our business, if we are ever sold or merge, subject to this policy.

5. International transfers

Some of our providers process data outside Nigeria. Where that happens we make sure the transfer is covered by appropriate safeguards as required by the NDPA.

6. How long we keep data

We keep account and transaction records for as long as your account is open and afterwards for the period the law requires financial and anti-money-laundering records to be retained (currently at least five years). Data we no longer need is deleted or anonymised. Support messages are kept while needed to resolve the issue and for our records.

7. Your rights

Under the NDPA you can ask us to:

• give you a copy of your personal data and tell you how we use it;
• correct data that is wrong or incomplete;
• delete your data or close your account (see how to delete your account), except where we must keep records by law;
• restrict or object to certain processing, including direct marketing;
• withdraw consent you gave, and receive your data in a portable format where applicable.

We reply within the time the law allows. If you are unhappy with our answer you may complain to the Nigeria Data Protection Commission (NDPC).

8. Security

We protect data with encryption in transit (HTTPS), hashing of passwords and PINs, encryption of sensitive identifiers, access controls for staff, activity logs, automatic sign-out after inactivity, and optional fingerprint unlock on the mobile app (your fingerprint never leaves your phone; we receive only a yes or no from your device). No system is perfectly secure, so please keep your password and PIN private and tell us at once if you suspect misuse. If a breach affects you, we will notify you and the NDPC as the law requires.

9. Cookies and local storage

The website uses browser storage that is essential for signing you in and keeping your session secure. We do not use advertising cookies.

10. Children

PAYDER is for people aged 18 or over. We do not knowingly collect data from children. If you think a child has registered, contact us and we will remove the account.

11. Changes to this policy

We may update this policy. When we make a material change we will post the new version here, change the date at the top, and notify you in the app or by email where appropriate.

12. Contact

QUAVOX TECHNOLOGIES LTD, House 11 Okonkwo Compound, Lane opposite St. Gabriel's Catholic Church, Igbuala, Ifitedunu, Anambra State, Nigeria. paydersolu@gmail.com.