Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, make a purchase, or contact us for support. This may include:

Personal Information: Name, email address, phone number, date of birth
Identity Verification: BVN, NIN, government-issued ID for KYC compliance
Financial Information: Bank account details, payment method information (processed securely by our payment partners)
Transaction Data: Purchase history, wallet balance, transaction amounts and timestamps
Technical Data: IP address, device information, browser type, operating system
Usage Data: How you interact with our platform, pages visited, time spent
Communication Data: Records of customer support interactions, feedback, and complaints

2. How We Use Your Information

We use the information we collect for the following purposes:

Service Provision: Process transactions, provide VTU services, maintain your account
Identity Verification: Comply with KYC requirements and regulatory obligations
Payment Processing: Process payments, prevent fraud, manage your wallet
Customer Support: Respond to inquiries, resolve issues, provide technical support
Communication: Send transaction confirmations, service updates, security alerts
Marketing: Send promotional offers, newsletters (with your consent)
Analytics: Improve our services, develop new features, understand user behavior
Legal Compliance: Meet regulatory requirements, prevent money laundering, combat fraud
Security: Protect against fraud, unauthorized access, and other security threats

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

Service Providers: Payment processors (Paystack), VTU providers (VTpass), cloud hosting services
Regulatory Compliance: When required by Nigerian law, CBN regulations, or court orders
Fraud Prevention: With banks, financial institutions, and security services to prevent fraud
Business Transfers: In case of merger, acquisition, or sale of business assets
Legal Requirements: To protect our rights, property, or safety, or that of our users
Consent: When you explicitly consent to sharing your information

4. Data Security and Protection

We implement comprehensive security measures to protect your personal information:

Encryption: All data is encrypted in transit and at rest using industry-standard protocols
Access Controls: Strict access controls and authentication mechanisms
Regular Audits: Regular security assessments and penetration testing
Employee Training: All staff are trained on data protection and privacy practices
Secure Infrastructure: Our systems are hosted on secure, certified cloud infrastructure
Incident Response: Comprehensive incident response procedures for data breaches

5. Data Retention

We retain your personal information for different periods depending on the type of data:

Account Information: Retained while your account is active and for 7 years after closure
Transaction Records: Retained for 7 years as required by Nigerian financial regulations
KYC Documents: Retained for 10 years as required by CBN guidelines
Communication Records: Retained for 3 years for customer service purposes
Marketing Data: Retained until you opt-out or for 3 years of inactivity

6. Your Rights and Choices

You have the following rights regarding your personal information:

Access: Request a copy of your personal information we hold
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information (subject to legal requirements)
Portability: Request transfer of your data to another service provider
Objection: Object to processing of your data for marketing purposes
Restriction: Request restriction of processing in certain circumstances
Withdrawal: Withdraw consent for data processing where applicable

Note: Some rights may be limited by legal obligations, particularly regarding financial records and KYC data.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and analyze usage:

Essential Cookies: Required for basic platform functionality
Analytics Cookies: Help us understand how you use our platform
Marketing Cookies: Used to deliver relevant advertisements (with consent)
Preference Cookies: Remember your settings and preferences

You can control cookie settings through your browser preferences, but disabling certain cookies may affect platform functionality.

8. Third-Party Services

Our platform integrates with third-party services for payment processing, VTU services, and analytics:

Paystack: Payment processing and fraud prevention
VTpass: VTU service provision and transaction processing
Supabase: Database hosting and authentication services
Google Analytics: Website analytics and performance monitoring

These third parties have their own privacy policies. We encourage you to review them.

9. International Data Transfers

Some of our service providers may be located outside Nigeria. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

Standard contractual clauses approved by relevant authorities
Adequacy decisions by data protection authorities
Certification schemes and codes of conduct

10. Children's Privacy

Our service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us immediately at privacy@vtubox.com

11. Data Breach Notification

In the event of a data breach that may affect your personal information, we will:

Notify you within 72 hours of becoming aware of the breach
Provide details of the breach and steps we're taking to address it
Recommend actions you can take to protect yourself
Report to relevant authorities as required by law

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by:

Posting the updated policy on this page
Sending email notifications to registered users
Displaying prominent notices on our platform
Updating the "Last updated" date

13. Contact Information

If you have any questions about this privacy policy or our data practices, please contact us:

Email: privacy@vtubox.com
Phone: +234 XXX XXX XXXX
Address: 11B, Maplewood Estate, Lagos, Nigeria
Response Time: Within 48 hours

Data Protection Officer: dpo@vtubox.com