Privacy Policy

Last updated: 2026-08-07

ElevatePay Limited ("ElevatePay", "we", "us") is committed to protecting your personal data in line with the Nigeria Data Protection Act (NDPA) 2023 and the Central Bank of Nigeria's consumer protection guidelines.

1. Information we collect

• Identity data: name, date of birth, BVN, NIN, and government ID where you provide it for KYC.
• Contact data: email address and phone number.
• Financial data: wallet balance, transactions, virtual card and crypto deposit activity.
• Technical data: device information, IP address, and app usage.

2. How we use your information

• To create and operate your virtual naira account and process transactions.
• To verify your identity (KYC/AML) as required by the CBN and NDPA.
• To prevent fraud, secure your account, and meet legal obligations.
• To provide support and send service notifications.

3. How we share your information

We share data with our payment processor (Flutterwave) to execute transactions, with regulators where legally required, and with service providers bound by confidentiality. We never sell your personal data.

4. Data security

Sensitive identifiers (BVN, NIN) are encrypted at rest. Passwords and your transaction PIN are hashed with argon2id. Access is restricted and audited.

5. Your rights

Under the NDPA you may access, correct, or request deletion of your data, and withdraw consent. Contact privacy@elevatepay.app to exercise these rights.

6. Data retention

We retain records for the periods required by financial-services regulations (generally five to seven years) and delete or anonymise data afterwards.

7. Contact

Data Protection Officer — privacy@elevatepay.app