Privacy policy

SeamlesPay (“SeamlesPay”, “we”) is responsible for the personal information described here, as a data controller under the Nigeria Data Protection Act 2023 (NDPA) and the rules of the Nigeria Data Protection Commission (NDPC).

When a business uses SeamlesPay to collect money from its customers, the business decides why it collects the customer’s details. For that information we act for the business, and we also use it for our own legal duties, such as fraud prevention and anti-money-laundering checks.

To contact us about privacy, including our data protection officer, write to support@seamlespay.com.

Business owners, directors and team members: name, email, phone number, date of birth, home address, BVN, NIN, ID documents, photos of documents, tax number, business registration details (such as CAC documents), website, bank account for payouts, and the sign-in details for your account (password stored only as a secure hash, authenticator and fingerprint set-up, withdrawal PIN stored only as a secure hash).

Customers who pay a business: name, email or phone number when given, the amount, the bank or card type, the last digits of a card or account, and the bank’s reference for the payment. Card numbers are entered on our payment partner’s secure page; we do not store full card numbers.

Technical information: IP address, device and browser type, times of sign-in, and the server addresses that call our API. We use this to keep accounts secure and stop fraud.

• To provide the service you signed up for — opening accounts, taking payments, sending payouts, statements and support (performance of a contract).
• To meet our legal duties — knowing our customers (KYC/KYB), checking BVN and NIN, keeping records, and reporting suspicious transactions under the Money Laundering (Prevention and Prohibition) Act 2022 and Central Bank of Nigeria rules (legal obligation).
• To prevent fraud and keep SeamlesPay safe — risk checks, holding suspicious payouts, and locking API keys to your servers (legitimate interests, and legal obligation).
• To tell you about changes to the service, prices and these policies (contract and legitimate interests). We only send marketing if you agree, and you can stop it at any time.

We never sell personal information. We share it only with:

• banks and partners that help us run payments and payouts;
• identity verification services that check BVN and NIN records;
• our hosting, security, backup and email providers, under contracts that protect your information;
• fraud-detection tools — any information sent to automated analysis tools is made anonymous first (no names, phone numbers, emails or account numbers);
• the business you paid (if you are a customer), so it can match your payment;
• regulators, courts, the police, the EFCC, the NFIU and other authorities when the law requires it.

Some of our service providers (for example for security and encrypted backups) may store or process information outside Nigeria. When this happens we make sure it is protected as the NDPA requires — for example by contract terms and by encrypting backups before they leave our servers.

We keep records of businesses and transactions for at least 5 years after the business relationship ends or the transaction happens, because Nigerian anti-money-laundering law requires it. We may keep them longer if a regulator or court asks, or while a dispute or investigation is open.

Information we no longer need is deleted or made anonymous.

• All connections are encrypted (HTTPS).
• Documents, provider credentials and secret keys are encrypted when stored.
• Passwords and PINs are stored only as secure hashes; nobody at SeamlesPay can read them.
• Staff need two-step sign-in, and only staff who need information for their job can see it. Staff actions are logged.
• Backups are encrypted and copied to a separate location.

Under the NDPA you can ask us to:

• tell you what information we hold about you and give you a copy;
• correct information that is wrong or incomplete;
• delete information we no longer have a reason or a legal duty to keep;
• stop or limit some uses, or object to them;
• send your information to you or another company in a common format;
• withdraw consent you gave, without affecting what was done before.

Write to support@seamlespay.com. We will reply within 30 days. If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

We only use cookies needed to keep you signed in and secure. We do not use advertising or tracking cookies, and we do not let third parties track you on our pages.

SeamlesPay accounts are only for adults (18 and over). We do not knowingly collect information from children.

If a security incident puts your information at risk, we will tell the NDPC within 72 hours as the law requires, and tell you without delay if there is a high risk to you, with steps you can take.

We may update this policy. The date at the top shows the latest version. For important changes we will tell account holders by email or in the dashboard.