Privacy policy

What we collect

Three kinds of data, and nothing else:

• Account data: the name, work email and phone number of the people on your team, and your business details.
• Transaction data: the destination number, network, amount, timing, the channels tried and the outcome. This is the record of the service itself.
• Technical data: IP addresses, API key identifiers, request timing and error traces, kept so we can debug and so the audit trail is real.

Why we hold it

To run the service, to bill you correctly, to investigate disputes and fraud, and to meet our obligations under Nigerian law, including the Nigeria Data Protection Act. We do not sell it, and we do not use your transaction data to build products for anyone else.

Who else sees it

The network operators and providers we route through see what they need to complete a transaction, which is the destination number, network and amount. Our infrastructure and payment providers process data on our instructions under written terms. Nobody else sees it unless a court or regulator compels us, and we will tell you when that happens unless we are barred from doing so.

How long we keep it

Transaction and ledger records are kept for seven years, because financial records have to be. Account data is deleted within ninety days of an account closing. Technical logs are kept for ninety days. Audit trail entries are append-only and are never edited.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete what we are not required to keep. Write to [email protected] and we will answer within thirty days. You can also complain to the Nigeria Data Protection Commission.

Security

Secrets are encrypted at rest with key identifiers, API keys are shown once and can be rotated with an overlap window, and every action against an account is written to an append-only audit trail. Report anything that looks wrong to [email protected] and we will acknowledge it the same day.