Privacy Policy

Paypoint (“we”, “us”) operates paypoint.co. We are the data controller for the personal information described in this policy. For any privacy question or request, contact us at privacy@paypoint.co.

• Account details — your name, email address, password (stored only as a secure hash), and WhatsApp business number.
• Business details — business name, logo, brand colour, and the products or services you list.
• Verification details — your CAC registration number (RC or BN) and the registered business name returned by the Corporate Affairs Commission registry; and your Bank Verification Number (BVN), which is checked once through a licensed identity-verification provider and never stored by Paypoint — we keep only the last four digits and the verification result.
• Settlement details — your bank account number and the account name confirmed by your bank, used solely to send you your money.
• Transaction records — payments received on your checkout pages.

Buyers do not create accounts. When you pay through a seller’s checkout page, we collect the details the seller needs to fulfil your order: your name, and (where the seller requests them) your phone number, email address, and delivery address — plus the transaction record itself.

Your card and bank details never touch Paypoint. Payment is completed on the secure page of a licensed payment processor; we receive only confirmation that payment succeeded.

We keep buyer contact and delivery details for 90 days after the transaction, after which they are deleted from our systems. Transaction records (amounts, references, dates) are kept longer as required for financial record-keeping.

• To provide the service: hosting checkout pages, confirming payments, sending money to sellers, and issuing receipts.
• To verify sellers’ identity and business registration, as required for fraud prevention and know-your-customer (KYC) compliance.
• To notify you: payment confirmations, receipts, and important account emails.
• To keep the platform safe: detecting fraud, abuse, and unlawful activity.
• To meet legal obligations under Nigerian law.

We do not sell personal information. We do not use buyer information for advertising.

We share information only with the service providers needed to run Paypoint:

• Licensed payment service providers — to process payments and settle money to sellers’ bank accounts.
• Licensed identity-verification providers — to verify CAC registrations, BVNs, and bank accounts.
• Infrastructure providers — secure cloud hosting and database services (our database is hosted in the European Union) and our transactional email provider.
• Sellers and buyers, to each other — a seller sees the order details a buyer submits; a buyer sees the seller’s business name and contact details.
• Authorities — where Nigerian law requires it.

All traffic to Paypoint is encrypted (HTTPS). Access to personal data is restricted by row-level database security, and sensitive identifiers are minimised — for example, we never store full BVNs. No system is perfectly secure, but we design ours so that the most sensitive information simply isn’t held by us at all.

Under the Nigeria Data Protection Act, you may:

• Request a copy of the personal information we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete your information, subject to legal record-keeping duties.
• Object to or restrict certain processing.
• Complain to the Nigeria Data Protection Commission.

To exercise any of these, email privacy@paypoint.co — we respond within 30 days.

Paypoint uses only essential cookies: they keep sellers signed in and keep the service secure. We do not use advertising or cross-site tracking cookies. If we ever introduce analytics cookies, we will update this policy and ask for consent where required.

When we change this policy, we’ll update the date at the top and, for material changes, notify sellers by email. Continued use of Paypoint after a change means you accept the updated policy.