Privacy Policy

1. Information we collect

• Account information — your name, email address, phone number, and password (stored as a one-way hash, never in plain text).
• Identity and payment information — information needed to create your dedicated virtual account and process transfers, handled by our payment processor, Paystack. We do not store your card or bank login details ourselves.
• Identity verification (KYC) — if you choose to verify your identity, your NIN or BVN is sent to VerifyNG, our identity-verification provider, along with your name for matching. We store only the verification outcome and the last 4 digits of the number submitted — never the full NIN or BVN.
• Transaction data — records of transfers, deposits, savings activity, and other actions you take in your wallet.
• Technical data — IP address, browser/device information, and timestamps, collected automatically for security and troubleshooting.

2. How we use your information

We use the information above to:

• Create and maintain your account and wallet balance
• Process transfers, deposits, and other transactions you initiate
• Verify your identity and prevent fraud
• Respond to support requests
• Meet legal and regulatory obligations applicable to financial services in Nigeria

We do not sell your personal information to third parties.

3. Who we share it with

We share the minimum information necessary with:

• Paystack, our payment processing partner, to create your dedicated account and process transfers and deposits.
• VerifyNG, our identity-verification partner, only if you choose to verify your NIN or BVN.
• Regulators and law enforcement, where required by applicable Nigerian law.
• Service providers who help us operate the platform (e.g. hosting), under obligations to protect your data.

4. How we protect it

Passwords are hashed, not stored in plain text. Sessions are authenticated with signed tokens. Access to production data is restricted to personnel who need it to operate the service. No system is perfectly secure, and we encourage you to use a strong, unique password and to never share your login credentials.

5. Data retention

We retain account and transaction data for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, and fraud-prevention obligations. You can request deletion of your account as described below.

6. Your rights

You can, at any time:

• View and update your profile information from your account settings
• Request a copy of the personal data we hold about you
• Request deletion of your account, subject to any outstanding balance or legal retention requirement

7. Cookies

We use a session cookie to keep you signed in and to protect against cross-site request forgery. We do not use third-party advertising or tracking cookies.

8. Children's privacy

E-Wallet is intended for users who are at least 18 years old. We do not knowingly collect information from anyone under that age.

9. Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, notify you directly.

10. Contact

Questions about this policy or your data can be sent to support@essentialng.com.