UnityBills ("we", "us") provides a wallet for airtime, data, bill payments, bank transfers and related services on our website, apps, USSD channels and API. This policy explains what personal data we collect, why, who we share it with and the rights you have under the Nigeria Data Protection Act 2023.
1. Data we collect
- Account details: your name, email address, phone number, username and password (stored only in hashed form).
- Identity details: your BVN or NIN when you request an account number, and KYC/KYB documents when you apply for higher limits or business features. We pass your BVN or NIN to our banking partner to open the account and keep only the last four digits.
- Transaction data: purchases, transfers, deposits, beneficiaries you save, recipients' phone numbers, meter and smartcard numbers.
- Technical data: IP address, browser and device information, and log records of sign-ins and API requests.
- Messages: what you send us through support tickets, the contact form, email or phone.
2. Why we use it
- To open and run your account and wallet, and to deliver the services you pay for (the contract between us).
- To verify your identity, prevent fraud and meet anti-money-laundering, tax and other legal obligations.
- To send you receipts, security alerts and service messages.
- To answer your questions and resolve disputes.
- To keep the platform secure and improve it. We do not sell your personal data.
3. Who we share it with
- Banking and payment partners that open account numbers, process transfers and receive deposits.
- Service providers that deliver airtime, data, electricity, cable TV and exam PINs. They receive only what is needed, such as the phone, meter or smartcard number.
- Infrastructure providers (hosting, email and SMS delivery) under confidentiality obligations.
- Regulators, law enforcement and courts when the law requires it.
- Businesses you deal with through us: if you pay into an account number a business opened for you on UnityBills, that business sees the payment.
4. How long we keep it
We keep account and transaction records for as long as your account is open and afterwards for the period financial regulations require (generally at least five years after a transaction). Records we no longer need are deleted or anonymised.
5. Security
We protect your data with encrypted connections, hashed passwords and PINs, transaction PINs, email codes for bank transfers, optional two-factor sign-in, access controls for our staff and signed webhooks for business integrations. No system is perfectly secure: keep your password, PIN and API key private and tell us at once if you suspect misuse.
6. Your rights
You may ask to access, correct or delete your personal data, object to or restrict some processing, receive a copy of your data, and withdraw consent where we rely on it. Some data must be kept to meet legal obligations even after you close your account. You can also complain to the Nigeria Data Protection Commission.
7. Children
UnityBills is for people aged 18 and over. We do not knowingly collect data from children.
8. Cookies
We use the cookies needed to sign you in and keep your session secure. See our Cookie Policy.
9. Changes
We may update this policy. The date at the top shows the latest version; for important changes we will also notify you.
10. Contact
For privacy questions or requests, email support@unitybills.ng or use our contact form. Office: Kano, Nigeria.