🔐 SabiPlug Privacy Policy

Last updated: 9/18/2025

1. Your Privacy Matters

At SabiPlug, we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your data in compliance with Nigeria's Data Protection Regulation (NDPR) and international best practices. By using our services, you consent to the data practices described in this policy.

2. Information We Collect

Personal Information You Provide:

Identity Information: Full name, date of birth, phone number, email address
Financial Information: Bank account details, card information, transaction history
Verification Documents: Government-issued ID, proof of address, selfie photos
Profile Information: Profile picture, preferences, settings
Contact Information: Phone contacts (with your permission) for referrals

Information Collected Automatically:

Device Information: Device type, operating system, unique device identifiers
Usage Data: App interactions, features used, time spent on platform
Location Data: General location (city/region) for security and service optimization
Technical Data: IP address, browser type, app version, crash reports
Transaction Data: Payment methods, transaction amounts, merchant information

Information from Third Parties:

Identity Verification: Information from credit bureaus and identity verification services
Financial Services: Data from banks and payment processors for transaction processing
Fraud Prevention: Information from security services to prevent fraud
Social Media: Information from linked social media accounts (if you choose to connect)

3. How We Use Your Information

Service Provision:

Process transactions and payments
Provide airtime, data, and utility bill payment services
Enable money transfers and wallet services
Facilitate bill splitting and group payments
Deliver customer support and assistance

Security & Fraud Prevention:

Verify your identity and prevent unauthorized access
Detect and prevent fraudulent activities
Monitor transactions for suspicious patterns
Comply with anti-money laundering regulations

Improvement & Personalization:

Improve our services and user experience
Develop new features and functionality
Personalize content and recommendations
Analyze usage patterns and trends

Legal & Compliance:

Comply with legal obligations and regulations
Respond to law enforcement requests
Protect our rights and interests
Enforce our Terms and Conditions

4. Information Sharing

We do NOT sell your personal information. We may share your information only in these limited circumstances:

Service Providers:

Payment processors and financial institutions
Identity verification and fraud prevention services
Cloud storage and data processing providers
Customer support and communication services

Transaction Partners:

Telecommunications providers (for airtime/data purchases)
Utility companies (for bill payments)
Merchants and service providers
Only necessary information is shared for transaction completion

Legal Requirements:

When required by law or legal process
To protect our rights, property, or safety
To prevent fraud or illegal activities
In case of emergency or to protect users

With Your Consent:

When you explicitly authorize sharing
For social features and referrals
When linking third-party accounts

5. Your Rights & Control

Under Nigerian Data Protection Regulation (NDPR), you have the following rights:

Access & Portability:

Request a copy of your personal data
Export your data in a portable format
View your transaction history and account information

Correction & Updates:

Update your personal information in profile settings
Correct any inaccurate data
Request data correction if needed

Consent Management:

Withdraw consent for data processing
Opt-out of marketing communications
Disable location tracking and contact access
Manage notification preferences

Deletion & Restriction:

Request deletion of your account and data
Restrict certain data processing activities
Object to automated decision-making

6. Data Security

We implement comprehensive security measures to protect your data:

Technical Safeguards:

End-to-end encryption for sensitive data
Secure socket layer (SSL) for data transmission
Multi-factor authentication for account access
Regular security audits and penetration testing
Secure cloud infrastructure with industry-standard protection

Administrative Controls:

Limited access to personal data on a need-to-know basis
Employee training on data protection and privacy
Regular security awareness programs
Incident response procedures for data breaches

Important: While we implement strong security measures, no system is 100% secure. You should also protect your account by using strong passwords, enabling two-factor authentication, and not sharing your login credentials.

7. Data Retention

We retain your personal data only as long as necessary:

Active Accounts: Data is retained while your account is active
Transaction Records: Financial records are kept for 7 years for regulatory compliance
Identity Verification: KYC documents are retained for 5 years after account closure
Marketing Data: Removed immediately upon opt-out
Inactive Accounts: Data may be deleted after 3 years of inactivity

8. Children's Privacy

SabiPlug is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we discover that we have collected information from a child under 18, we will delete that information promptly.

9. Cookies & Tracking

We use cookies and similar technologies to:

Remember your preferences and settings
Analyze app usage and performance
Provide personalized experiences
Ensure security and prevent fraud

You can manage cookie preferences in your device settings or browser. However, disabling certain cookies may affect app functionality.

10. International Transfers

Your data may be transferred to and processed in countries other than Nigeria. When we do this, we ensure appropriate safeguards are in place, including: