Privacy Policy

NovvaPay ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application, mobile application, WhatsApp bot, and USSD service (collectively, the "Platform").

NovvaPay is a closed-loop utility ecosystem that simplifies and automates everyday utility payments including airtime, data bundles, cable TV, electricity, exam pins, and Remita (RRR) processing. By using our Platform, you agree to the practices described in this policy.

Last updated: June 21, 2026

We collect various types of information to provide and improve our services to you.

Personal Information

When you register for a NovvaPay account, we collect your full name, email address, phone number, date of birth, and BVN (Bank Verification Number) for identity verification and compliance with regulatory requirements.

Financial Information

We collect transaction details including funding sources, wallet balances, payment histories, beneficiary details (phone numbers, meter numbers, smartcard numbers), and virtual dollar card transaction data. We do not store raw card numbers; payment processing is handled by our PCI-compliant partners (Paystack, Monnify).

Usage & Device Information

We automatically collect certain data when you access the Platform, including your IP address, browser type, device type, operating system, referring URLs, and pages visited. We use cookies and similar tracking technologies for this purpose.

Communication Data

If you contact our support team, we retain records of your inquiries, correspondence, and any information you voluntarily provide.

We use the information we collect for the following purposes:

• •Service Delivery: To process utility payments, manage your wallet, execute recurring bill schedules, and provide virtual dollar card services.
• •Verification & Security: To verify your identity, detect fraudulent activity, prevent unauthorized access, and comply with KYC/AML regulatory obligations.
• •Rewards & Incentives: To administer cashback credits, referral bonuses, welcome data bonuses, and auto-save profit vaults.
• •Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• •Platform Improvement: To analyze usage trends, improve our user interface, and develop new features.
• •Communications: To send transaction alerts, service updates, marketing materials (with your consent), and important policy changes.

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• •Service Providers: With trusted third-party partners who help us operate the Platform, including payment gateways (Paystack, Monnify), crypto infrastructure (Circle), and utility bill aggregators.
• •Legal Compliance: When required by law, court order, or governmental regulation, including compliance with CBN directives and anti-money laundering statutes.
• •Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the business assets.
• •With Your Consent: We may share your information for any other purpose with your explicit consent.

We implement robust security measures to protect your information from unauthorized access, alteration, disclosure, or destruction:

• •End-to-end encryption of sensitive data in transit and at rest
• •PCI DSS-compliant payment processing via our partners
• •Multi-factor authentication for account access
• •Real-time transaction monitoring and fraud detection systems
• •Regular security audits and penetration testing
• •Strict access controls and employee training on data protection

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We encourage you to maintain strong passwords and enable two-factor authentication.

We retain your personal information for as long as your account is active or as needed to provide you with our services. We may retain certain information longer for legitimate business purposes or to comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will initiate a process to delete or anonymize your personal data within 90 days, except where retention is required by law (e.g., transaction records for financial regulation compliance).

Consistent with the Nigeria Data Protection Act, 2023 (and the Nigeria Data Protection Regulation, NDPR), you have the following rights regarding your personal information:

• •Access: Request a copy of the personal data we hold about you.
• •Correction: Update or correct inaccurate or incomplete information.
• •Deletion: Request deletion of your personal data, subject to certain exceptions.
• •Portability: Request a machine-readable copy of your data to transfer to another service.
• •Withdraw Consent: Withdraw your consent for marketing communications at any time.

To exercise any of these rights, please contact our Data Protection Officer at privacy@novvapay.com.

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and serve relevant content.

• •Essential Cookies: Required for the Platform to function, including session management and security.
• •Analytics Cookies: Help us understand how users interact with our Platform to improve functionality.
• •Preference Cookies: Remember your settings and preferences for a personalized experience.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform.

NovvaPay integrates with several third-party service providers to deliver its features:

• •Payment Processing: Paystack, Monnify — for card, bank, and other payment funding.
• •Crypto Infrastructure: Circle — for USDC deposits on the Base Network (coming soon).
• •Banking Partners: Commercial banks — for dedicated virtual account assignment.

These third parties have their own privacy policies governing the use of your information. We encourage you to review their policies.

Our Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will take steps to delete such information promptly. If you believe a minor has provided us with their data, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will notify you of material changes via email and/or a prominent notice on the Platform. Your continued use of the Platform after the effective date of the revised policy constitutes your acceptance of the changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: