This Privacy Policy applies to:

• Individuals using Payboost
• Merchants
• Business customers
• Website visitors
• Mobile application users
• API users
• Customer support interactions

When you register or use our Services, we may collect:

• Full name
• Email address
• Mobile phone number
• Residential address
• Date of birth
• Profile photograph (where applicable)

To comply with applicable laws and regulatory requirements, we may collect:

• Bank Verification Number (BVN)
• National Identification Number (NIN)
• Government-issued identification
• Selfie or facial verification
• Proof of address

Depending on the services you use, we may collect:

• Bank account information
• Wallet identifiers
• Transaction references
• Merchant details
• Payment history
• Account balances
• Beneficiary information

We automatically collect certain technical information including:

• IP address
• Browser type
• Device model
• Operating system
• Device identifiers
• Mobile network information
• Login timestamps
• Application version

We collect information about how you interact with our Services, including:

• Features used
• Session duration
• Error reports
• Performance information
• Clickstream data
• Referral sources

We collect information:

• Directly from you during registration
• During identity verification
• When you complete transactions
• When you contact customer support
• Through cookies and similar technologies
• From licensed financial institutions
• From identity verification providers
• From payment processors
• From publicly available sources where permitted by law

We use your information to:

• Create and manage your Payboost account
• Verify your identity
• Process payments and transfers
• Provide wallet services
• Prevent fraud and unauthorized transactions
• Detect suspicious activities
• Comply with Anti-Money Laundering (AML) and Counter-Terrorism Financing (CFT) regulations
• Meet legal and regulatory obligations
• Improve our products and services
• Personalize your user experience
• Respond to customer enquiries
• Send important service notifications
• Maintain platform security
• Conduct internal audits
• Resolve disputes

We process your personal information where:

• You have provided your consent.
• Processing is necessary to provide our Services.
• Processing is required by applicable law.
• Processing is necessary to comply with regulatory obligations.

Verification may involve:

• BVN validation
• NIN verification
• Government-issued ID verification
• Facial verification
• Address verification
• Verification through approved third-party providers

We use cookies and similar technologies to:

• Remember your preferences
• Keep you signed in
• Improve website performance
• Enhance security
• Analyze platform usage
• Improve user experience

We may share your information with:

• Licensed banking partners
• Payment processors
• Identity verification providers
• Regulatory authorities
• Law enforcement agencies
• Fraud prevention service providers
• Cloud infrastructure providers
• Professional advisers
• External auditors

We may disclose your information where required by law, including:

• Court orders
• Regulatory directives
• Anti-money laundering investigations
• Counter-terrorism financing investigations
• Financial crime investigations
• Other lawful government requests

We retain personal information only for as long as necessary to:

• Provide our Services
• Meet legal and regulatory obligations
• Resolve disputes
• Prevent fraud
• Maintain business records

These measures include:

• Encryption of sensitive data
• Secure network infrastructure
• Multi-Factor Authentication (MFA)
• Role-Based Access Control (RBAC)
• Security monitoring
• Audit logging
• Vulnerability assessments
• Employee security awareness training

Subject to applicable law, you may have the right to:

• Request access to your personal information
• Correct inaccurate information
• Request deletion of your information
• Withdraw consent where applicable
• Restrict certain processing activities
• Object to specific processing activities
• Request a copy of your data
• Lodge a complaint with the appropriate data protection authority