Privacy Policy

1. Information We Collect

To deliver licensed fintech services, instant bank transfers, dedicated virtual accounts, and utility bill payments, we collect the following categories of information:

• Personal Identification Data: Full legal name, email address, mobile phone number, residential address, profile avatar, and government-issued verification identifiers (BVN and NIN) required under Central Bank of Nigeria (CBN) Anti-Money Laundering (AML) / Know Your Customer (KYC) regulations.
• Financial & Transactional Data: Virtual account numbers, transaction histories, beneficiary account details, payment amounts, timestamps, and payment statuses. (Note: We never store your raw banking PINs or card CVVs; all credentials are cryptographically hashed using BCrypt and 256-bit AES encryption).
• Device & Technical Identifiers: Device model, operating system version, unique device identifier (UUID), IP address, Firebase Cloud Messaging (FCM) push tokens, and diagnostic crash logs.
• Biometric Data: If you enable Fingerprint or Face ID login, biometric verification is executed entirely on-device by your phone's secure hardware enclave. We never access, capture, or transmit your raw biometric templates.

2. How We Use Your Information

We process your data strictly for legitimate financial service operations, including:

• Creating and managing your VeePay Technologies digital wallet and dedicated PalmPay virtual account.
• Executing instant interbank transfers, bill payments, and airtime top-ups via authorized switches.
• Validating identity and complying with statutory AML/CFT compliance mandates.
• Transmitting real-time push notifications, transaction receipts, and security alerts.
• Detecting, preventing, and reporting fraudulent activities and account takeovers.

3. Third-Party Service Providers

We only share necessary data with audited, licensed third-party partners to fulfill transactions:

• Payment & Virtual Account Gateways: ZenithPay, PalmPay, and licensed commercial partner banks for instant payment settlements.
• Telecommunications & Discos: MTN, Airtel, Glo, 9mobile, and electricity distribution companies for automated bill fulfillment.
• Push Notification Gateways: Google Firebase Cloud Messaging (FCM HTTP v1) for timely transaction receipts.

4. Data Security & Storage

We implement bank-level technical safeguards:

• End-to-End Encryption: All network communication is strictly enforced via TLS 1.3 / SSL.
• Cryptographic Hashing: Passwords and transaction PINs are irreversibly hashed with BCrypt.
• Access Control: Administrative access is protected with strict Multi-Factor Authentication and immutable audit logging.

5. Your Rights Under NDPR

Under the Nigeria Data Protection Act and NDPR, you possess the right to:

• Access, review, or update your personal account data at any time from within the app.
• Request an export of your complete transaction statements and records.
• Request account closure and permanent erasure of your personal data.

6. Account & Data Deletion Policy

In full compliance with Google Play Store User Data standards, you can request the permanent deletion of your VeePay Technologies account and associated personal data at any time.

To request deletion, you can:

• Visit our dedicated Account Deletion Request Page.
• Or email us directly at support@veepay.ng with your registered phone number.

Please note: Statutory transaction ledgers are retained for the legally mandated period specified by the Central Bank of Nigeria (CBN) AML laws before complete purging.

7. Children's Privacy

Our financial services are exclusively designed for individuals aged 18 and above who possess valid identification. We do not knowingly collect personal information from minors.

8. Contact Our Data Protection Officer

For questions regarding this policy or your personal data, contact us through any of our official channels: