Privacy Policy

1. Who we are

FastData ("we", "us", "our") is operated by [Your Registered Company Name], a company registered in Nigeria. This policy explains what personal data we collect when you use our website, mobile app, and services, why we collect it, and the rights you have over it under the Nigeria Data Protection Act (NDPA) 2023.

2. Information we collect

We collect the following categories of information:

• Account information: your name, email address, phone number, and a hashed version of your password (we never store your password in readable form).
• Transaction information: records of airtime, data, electricity, and cable purchases, wallet funding and balance history, and the phone numbers, meter numbers, or smartcard numbers you transact against.
• Payment information: we do not store your card details. Card payments are processed directly by Paystack, our licensed payment processor, under their own privacy and security terms.
• Device and usage information: IP address, browser type, device identifiers, and general usage logs, collected automatically for security and fraud prevention.
• Support communications: anything you send us via email, WhatsApp, or live chat when you contact support.

3. How we use your information

• To create and manage your account and wallet
• To process and deliver airtime, data, and bill payment transactions
• To detect, investigate, and prevent fraud and unauthorized account access
• To provide customer support
• To comply with our legal obligations, including anti-money-laundering and tax record-keeping requirements
• To send you service-related communications (transaction receipts, security alerts). We do not send marketing messages unless you opt in separately.

4. Legal basis for processing

We process your personal data on the following bases under the NDPA: performance of the contract between you and us (delivering the services you request), our legitimate interest in keeping the platform secure and preventing fraud, compliance with legal obligations, and, where applicable, your consent.

5. Who we share your data with

We share the minimum data necessary with the following categories of third parties, each bound by their own data protection obligations:

• Paystack — to process wallet funding and card payments.
• VTpass — to fulfill airtime, data, electricity, and cable purchases you request.
• Regulators and law enforcement — where required by Nigerian law, such as under a valid court order or regulatory request.

We do not sell your personal data to third parties.

6. Data storage and security

Your data is stored on servers with access restricted to authorized personnel only. Passwords are hashed using Argon2id and are never stored or logged in plain text. Wallet and transaction data is protected by role-based access controls, and administrative actions are logged in an audit trail. No system is 100% secure, and we continuously work to improve our safeguards.

7. Data retention

We retain account and transaction data for as long as your account is active, and for a reasonable period afterward to meet our legal, tax, and dispute-resolution obligations. You can request earlier deletion subject to section 8 below.

8. Your rights

Under the NDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to our legal retention obligations
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us using the details in section 11.

9. Cookies

We use essential cookies required to keep you securely logged in (such as the encrypted session cookie that maintains your login). We do not currently use third-party advertising or tracking cookies.

10. Children's privacy

Our services are not directed at, and may not be used by, anyone under 18 years of age. We do not knowingly collect personal data from minors.

11. Contact us

If you have questions about this policy or wish to exercise your data rights, contact us at privacy@fastdata.example or write to [Your Registered Company Address]. If applicable, you may also lodge a complaint with the Nigeria Data Protection Commission (NDPC).

12. Changes to this policy

We may update this policy from time to time. We'll post the revised version here with an updated "last updated" date, and notify you directly for material changes.