Privacy Policy

Last updated: September 24, 2026

1. What We Collect

Your name, email, phone number, and the identity information needed for KYC (BVN, NIN). We never store your raw BVN or NIN — only a one-way hash used to detect duplicate accounts. We also collect transaction data (amounts, counterparties, timestamps) and device information for security.

2. How We Use It

To verify your identity, process deposits/withdrawals/trades, detect fraud and sanctions matches, send you transaction and security notifications, and comply with Nigerian financial regulations.

3. Who We Share It With

Our banking and identity-verification partners (for BVN/NIN checks and Naira transfers), our crypto custody partner (for wallet infrastructure), our email and push-notification providers (to deliver messages you’ve asked for), and regulators or law enforcement when legally required.

4. Data Retention

We keep account and transaction records for as long as your account is active and for the period required by Nigerian financial-services record-keeping rules after closure.

5. Your Rights

Under the Nigeria Data Protection Act (NDPA), you can request a copy of your data, ask us to correct inaccurate data, and request account closure, subject to our regulatory record-keeping obligations.

6. Security

Passwords and transaction PINs are stored as one-way hashes, never in plain text. Sensitive identity numbers are hashed, never stored raw. We use encryption in transit for all API traffic.

7. Contact

Questions about this policy or your data can be sent to support@coinora.app.