Privacy Policy

At KivoraPay we take your privacy seriously. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have over your data. Please read it carefully.

KivoraPay is a bill payment platform building payment infrastructure for Africa. We are currently live in Nigeria and will expand to additional African countries over time. This policy applies to all users regardless of location.

When you create an account we collect your full name, email address, and phone number. This is necessary to set up and operate your account.

When you use the platform we collect transaction data: crypto amounts received, asset types, blockchain transaction identifiers, payment value information, bill payment amounts, biller details, payment status, and timestamps of all account activity.

We also collect technical information such as your IP address and device type when you access the platform. This is used solely for security and fraud prevention.

Crypto transactions are recorded on public blockchains. When you send crypto to your KivoraPay payment address, the transaction is publicly visible on the relevant network. KivoraPay records the transaction identifier, asset type, network, and amount to accurately apply your payment value. We do not control the public nature of blockchain data.

We use the information we collect only for the following purposes: to create and manage your account; to process your bill payments accurately; to detect and prevent fraud and unauthorized access; to send you transaction confirmations and important account notifications; to resolve disputes and respond to support requests; and to comply with applicable legal obligations.

We do not use your personal information for advertising or marketing purposes without your explicit consent.

KivoraPay does not sell, rent, lease, or share your personal information with any third party for commercial or marketing purposes. Your data belongs to you.

To deliver our service we work with a small number of trusted third-party providers. Each provider receives only the minimum information necessary to perform their specific function.

Our licensed third-party payment and settlement providers process bill payments on our behalf and receive only the payment details required to execute each transaction. These providers are independently licensed and maintain their own compliance and data protection obligations.

We select our providers carefully and require that they maintain appropriate security standards.

Your information is stored on encrypted servers with access restricted to authorized systems only. We implement row-level security on our database so that users can only access their own data. All communication between your device and our platform is encrypted using industry-standard protocols. Sensitive credentials are stored in secure environment management systems and are never exposed in our codebase.

While we take every reasonable precaution, no system is completely immune to risk. In the event of a breach affecting your personal information we will notify you promptly and take immediate steps to contain and resolve the issue.

We retain your account and transaction data for as long as your account is active. If you request deletion of your account we will delete your personal information within 30 days, except where retention is required by law or for legitimate dispute resolution purposes. Transaction records may be retained for longer periods to comply with applicable record-keeping requirements.

You have the following rights regarding your personal data held by KivoraPay: the right to access a copy of your information; the right to request correction of inaccurate or incomplete information; the right to request deletion of your account and personal data; the right to withdraw consent for any processing based on your consent; and the right to lodge a complaint with a relevant data protection authority.

To exercise any of these rights please contact us at privacy@kivorapay.com. We will respond within 14 business days.

KivoraPay uses only essential session cookies strictly necessary to keep you logged in. We do not use advertising cookies, third-party tracking cookies, or analytics tools that collect your personal data. You cannot opt out of essential cookies as they are required for the platform to function, but you may clear them at any time through your browser settings.

KivoraPay is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account we will delete the account and all associated data immediately.

Our platform may contain links to third-party websites or services. KivoraPay is not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party site you visit.

We may update this Privacy Policy to reflect changes in our practices or applicable law. When we make significant changes we will notify you via the email address on your account at least seven days before they take effect. The updated policy will always be available on the platform with the effective date clearly stated.

For any privacy-related questions, requests, or concerns please contact us at privacy@kivorapay.com. We are committed to resolving any concerns you have about how we handle your personal information.