Privacy Policy Last updated: [DATE] ZamoraxPay ("we", "us", "our") provides an online platform for purchasing airtime, data, cable TV subscriptions, electricity tokens, exam PINs, and sportsbook wallet funding within Nigeria. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. ## 1. Information We Collect - Account information: phone number, email address, and full name provided at signup. - Transaction information: service purchases, wallet funding history, recipient phone/meter/smartcard numbers you enter, and payment references. - Identity verification information (resellers only): if you choose to upgrade to a reseller account, we collect a Bank Verification Number (BVN) solely to confirm your identity and unlock wholesale pricing limits. We store only a masked reference and verification result — we do not retain your full BVN in plain text. - Device and usage information: IP address, browser type, and general usage patterns, collected automatically to help secure your account and improve the service. - Cookies: see our separate Cookie Policy for details on cookies and similar technologies. ## 2. How We Use Your Information We use your information to: create and manage your account; process airtime, data, bill, and other purchases; fund and maintain your wallet balance; detect and prevent fraud; communicate with you about your transactions; and improve our services. ## 3. How We Share Information We share information only where necessary to operate the service: - Payment processors (Korapay, Paystack) to process wallet funding. - VTU and billing aggregators to fulfill airtime, data, cable, electricity, exam PIN, and betting wallet purchases. - Email service providers (Resend) to send transactional emails and receipts. - We do not sell your personal information to third parties. ## 4. Data Retention We retain account and transaction records for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and fraud-prevention obligations. ## 5. Your Rights You may request access to, correction of, or deletion of your personal information, subject to our legal and regulatory recordkeeping obligations, by contacting us using the details on our Contact page. ## 6. Security We apply reasonable technical and organizational measures to protect your information, including encrypted transmission (HTTPS/SSL) and restricted internal access to sensitive data. ## 7. Changes to This Policy We may update this Privacy Policy from time to time. Material changes will be reflected with an updated "Last updated" date above. ## 8. Contact Us If you have questions about this Privacy Policy, please reach out via our Contact page.