This Privacy Policy explains how PowerWave ("PowerWave", "we", "us") collects, uses and protects your personal data when you use PowerWave.ng, in line with the Nigeria Data Protection Act 2023.
1. Information we collect
- Account information: name, email address, phone number, and password (stored as a one-way hash, never in plain text).
- Verification (KYC) information: BVN, NIN, a captured passport photo, selfie and signature, and business details for reseller applicants, collected only when you choose to upgrade your verification tier.
- Transaction information: wallet transactions, purchases, meter and smartcard numbers, phone numbers you top up, and withdrawal bank details.
- Technical information: IP address, device and browser information, and log data, used for security and fraud prevention.
2. How we use your information
We use your information to create and secure your account, process your transactions, verify your identity where required by law or to raise your transaction limits, prevent fraud, provide customer support, and send you service-related communications. We do not sell your personal data.
3. Sensitive verification data
BVN and NIN numbers are encrypted before storage. Passport, selfie and signature captures are stored securely and accessible only to authorized staff reviewing your verification, for the purpose of confirming your identity. We use a licensed third-party verification provider to validate BVN/NIN details; we do not sell or share this data for any other purpose.
4. Who we share information with
We share the minimum information necessary with: licensed payment and billing providers (for example Paga) to process your transactions; our virtual card issuing partner; our identity verification and SMS providers, to verify your details; and SubCoinX, limited to what is needed to operate your SubCoin wallet. We may also disclose information where required by law or a valid request from a regulatory or law enforcement authority.
5. Data retention
We retain account and transaction records for as long as your account is active and afterward for as long as required by applicable financial regulations and record-keeping obligations, after which the data is securely deleted or anonymized.
6. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, or object to certain processing, by contacting us at the email below. We may need to verify your identity before acting on a request, and some information must be retained where required by law (for example, financial transaction records).
7. Security
We use encryption for sensitive data, secure password hashing, and access controls restricting who can view your information. No method of transmission or storage is completely secure, and we encourage you to also keep your password, PIN and devices secure.
8. Cookies
We use essential cookies to keep you signed in and to protect your account (for example, session and CSRF-protection cookies). We do not use third-party advertising cookies.
9. Children
The Platform is not directed at, and may not be used by, anyone under 18 years of age.
10. Changes to this policy
We may update this policy from time to time. Material changes will be communicated by email or in-app notice.
11. Contact us
For privacy questions or to exercise your rights, contact us at support@powerwave.ng.