Privacy Policy

📋1. Information We Collect

We collect information you provide directly and information generated through your use of our platform.

Account information:

• Full name, phone number, and email address
• 6-digit PIN (stored as a one-way cryptographic hash — we cannot retrieve it)
• National Identification Number (NIN) for identity verification
• Selfie photograph submitted during registration
• Business name and CAC registration documents (merchants only)

Transaction data:

• Crypto amounts, wallet addresses, and transaction hashes
• NGN values at time of transaction
• Bank account details for NGN withdrawal settlement
• Order history, timestamps, and status records

Technical data:

• Device type and browser information (for security purposes)
• IP address and access timestamps
• Push notification tokens (if you enable notifications)

🎯2. How We Use Your Information

We use your information solely to operate and improve the CryptoPOS platform:

• Create and manage your account
• Process crypto payments and NGN settlements
• Verify your identity for KYC compliance
• Send transaction notifications and OTP codes via SMS and email
• Detect and prevent fraud and unauthorized access
• Comply with applicable Nigerian financial regulations
• Respond to your support requests
• Calculate and distribute referral rewards

We do not use your data for advertising, profiling, or any purpose unrelated to the services you signed up for.

🤝3. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Service providers: Third-party infrastructure providers (database, cloud storage, email delivery) who process data strictly on our behalf under confidentiality agreements
• Blockchain networks: Crypto transactions are recorded on public blockchains by their nature — wallet addresses and transaction amounts are visible on-chain
• Legal requirements: We may disclose information when required by Nigerian law, court order, or to cooperate with regulatory authorities
• Fraud prevention: We may share information with law enforcement if we detect fraudulent or criminal activity on the platform

🔐4. Data Security

We implement multiple layers of security to protect your information:

• All data is transmitted over HTTPS/TLS encryption
• PINs are hashed using bcrypt — never stored in plain text
• Session tokens are signed with JWT and expire after 7 days
• KYC documents are stored in private, access-controlled cloud storage
• HD wallet keys are derived using BIP32/BIP44/BIP84 standards — your funds stay on-chain
• Database access is restricted to backend services only — never exposed publicly

Despite these measures, no system is 100% secure. If you suspect unauthorized access to your account, change your PIN immediately and contact our support team.

✋5. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update inaccurate or incomplete information via your dashboard settings
• Deletion: Request deletion of your account and associated data, subject to regulatory retention requirements
• Portability: Request your transaction history in a portable format
• Objection: Object to specific uses of your data where you have legitimate grounds

To exercise any of these rights, contact us via WhatsApp or email. We will respond within 14 business days.

🪪6. KYC & Identity Verification

To comply with Nigerian financial regulations and prevent fraud, we require identity verification (KYC):

• Your NIN and selfie are used solely for identity verification
• Merchant CAC documents are used to verify legitimate business registration
• KYC data is reviewed only by authorized CryptoPOS staff
• We do not share KYC documents with third parties except as required by law
• Documents are stored in encrypted, private storage and are not publicly accessible

🍪7. Cookies & Tracking

CryptoPOS uses minimal browser storage:

• localStorage: Used to store your session token, theme preference, and display name on your device only
• sessionStorage: Used for temporary UI state within a single browser session
• We do not use third-party tracking cookies, advertising pixels, or analytics that share your data externally

🗄️8. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations:

• Account data is retained while your account is active
• Transaction records are retained for a minimum of 5 years as required by Nigerian financial regulations
• KYC documents are retained for the duration of your account and up to 5 years after closure
• Abandoned registration data (incomplete sign-ups) is deleted after 24 hours

👶9. Children's Privacy

CryptoPOS is not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has registered on our platform, please contact us immediately and we will delete the account.

📝10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify registered users via email or SMS. Continued use of the platform after changes constitutes your acceptance of the updated policy.

📞11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please reach out to us: