Privacy Policy

At VtrixPay, your privacy is a priority, not an afterthought. We are strictly committed to safeguarding your personal data and ensuring total transparency in our operations, fully compliant with the Nigeria Data Protection Regulation (NDPR) and global best practices.

1. Scope of Data Collection

To provide seamless financial services and maintain the integrity of our payment ecosystem, we collect information that categorized as follows:

• Identity & KYC Data: Legal full name, verified email address, phone number, and residential address. In line with CBN regulations, we collect your Bank Verification Number (BVN) for mandatory identity validation.
• Financial & Transactional Records: Comprehensive logs of payments processed, wallet funding history, timestamps, recipient metadata, and ledger balances.
• Technical Metadata: IP addresses, device hardware identifiers, browser specifications, and session data to prevent unauthorized access and improve system performance.

2. Utilization of Information

VtrixPay processes your data solely to maintain a secure, high-frequency payment environment:

• Service Execution: Facilitating real-time settlements, managing digital wallet infrastructure, and automating service delivery (Data, Airtime, Utilities).
• Operational Support: Troubleshooting technical hurdles, resolving transaction disputes, and optimizing user experience.
• Fraud Mitigation: Continuous monitoring for suspicious patterns, performing Anti-Money Laundering (AML) screenings, and implementing "Know Your Customer" (KYC) protocols.
• Regulatory Compliance: Fulfilling reporting obligations to the Central Bank of Nigeria (CBN) and other statutory authorities.

3. Institutional-Grade Security

We deploy a multi-layered security architecture to protect your assets and information:

• End-to-End Encryption: All data in transit and at rest is secured using Advanced Encryption Standard (AES) and Secure Socket Layer (SSL) protocols.
• Hardened Access Control: Implementation of Multi-Factor Authentication (MFA) and biometric challenges for sensitive wallet operations.
• Internal Safeguards: Access to user data is restricted to vetted personnel only, subject to strict Non-Disclosure Agreements (NDAs).

4. Information Disclosure Policy

We do not trade, rent, or sell your personal data to third parties. Disclosure only occurs under these controlled conditions:

• Technical Partners: Trusted infrastructure providers who facilitate payment processing, cloud hosting, and identity verification.
• Legal Mandates: Where disclosure is necessary to comply with a court order, law, or a formal request from the Nigeria Data Protection Commission (NDPC).
• Corporate Evolution: In the event of organizational restructuring or acquisition, ensuring the continued protection of user records under the same privacy standards.

5. Retention & Disposal

We retain your data for the duration of your relationship with VtrixPay. Upon account deactivation, we are legally required to archive certain records for a minimum of six (6) years to comply with statutory financial auditing and anti-terrorism laws in Nigeria.

6. Your Statutory Rights

As a data subject under the NDPR, you are entitled to:

• The Right to Information: Transparency regarding how your data is processed.
• The Right of Access: Requesting a portable digital copy of your data records.
• The Right to Rectification: Immediate correction of any inaccurate personal profile details.
• The Right to Erasure: Requesting data deletion, provided it does not conflict with legal retention mandates.

7. Governance & Support