Privacy Policy

We collect the following categories of personal information:

• Account Information: Full name, email address, phone number, and password when you register.
• Identity Verification (KYC): National Identification Number (NIN), Bank Verification Number (BVN), and government-issued ID documents, collected when required by regulation.
• Financial Information: Wallet balance, transaction history, bank account details, and virtual account numbers associated with your profile.
• Transaction Data: Records of purchases (airtime, data, electricity, cable TV, etc.), including recipient numbers, amounts, dates, and provider references.
• Device & Usage Data: Device type, operating system, IP address, app version, and usage patterns — collected automatically to improve the service.
• Communications: Messages or requests you send to our support team.

We use the information we collect to:

• Create and manage your account and authenticate your identity.
• Process transactions and deliver the VTU services you request.
• Verify your identity and comply with KYC and Anti-Money Laundering (AML) regulations in Nigeria.
• Detect and prevent fraud, abuse, and unauthorized access.
• Send transaction confirmations, receipts, and security alerts.
• Respond to support enquiries and resolve disputes.
• Improve our platform, diagnose technical issues, and develop new features.
• Comply with applicable laws, regulations, and court orders.

We do not sell your personal data. We may share your information only in these circumstances:

• Service Providers: Payment processors, network operators (MTN, Airtel, Glo, 9mobile), cable TV operators, electricity distribution companies, and other vendors required to fulfil your transactions.
• Identity & Compliance Partners: KYC/AML verification providers and financial institutions required by Nigerian law (CBN guidelines, FCCPC, NDPC).
• Infrastructure Providers: Cloud hosting and database providers who process data on our behalf under data processing agreements.
• Legal Obligations: Regulatory authorities, law enforcement, or courts when required by applicable law.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, subject to the same privacy protections.

We retain your personal data for as long as your account is active and for a minimum of 5 years after account closure, as required by Nigerian financial regulations. Transaction records required for dispute resolution or regulatory audits may be retained longer. You may request deletion of your account data (subject to legal retention obligations) by contacting us.

We implement industry-standard security measures to protect your data, including:

• TLS encryption for all data in transit.
• Encrypted storage for sensitive fields (passwords, PINs).
• Role-based access controls so only authorised staff can access personal data.
• Regular security reviews and vulnerability assessments.

No system is 100% secure. If you believe your account has been compromised, contact us immediately and change your password and PIN.

Under the Nigeria Data Protection Act (NDPA) 2023 and applicable regulations, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete information.
• Deletion: Request deletion of your personal data, subject to legal obligations.
• Objection: Object to certain types of processing, including marketing.
• Portability: Receive your data in a structured, machine-readable format.

To exercise any of these rights, email us at support@vendoraapp.com. We will respond within 30 days.

Our web platform uses browser local storage to keep you logged in and remember your preferences (e.g., dark/light mode). We do not use third-party advertising cookies. Our mobile apps do not use cookies but may use device storage for similar purposes.

Vendora is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a child under 18 has provided us with personal data, we will delete it promptly. If you believe a minor has registered, contact us at support@vendoraapp.com.

Our platform integrates with third-party APIs to deliver VTU services. These providers have their own privacy policies and we are not responsible for their practices. By using our services you acknowledge that transaction data (recipient phone number, meter number, etc.) is transmitted to the relevant service provider to complete your request.

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective Date” at the top of this page and notify you via email or an in-app notice for material changes. Your continued use of the platform after changes are posted constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please reach out: