Privacy Policy

At KivoraPay we take your privacy seriously. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have over your data. Please read it carefully.

KivoraPay B.V. is incorporated in the Netherlands and operates a crypto spending and business payments platform across Africa. We are currently live in Nigeria and will expand to additional African countries over time. This policy applies to all users, merchants, and platform visitors regardless of location.

When you create an account we collect your full name, email address, and phone number. This is necessary to set up and operate your account.

When you use the platform we collect transaction data: crypto amounts received, asset types, blockchain transaction identifiers, payment value information, bill payment amounts, biller details, invoice and payment request details, merchant order details, payout details, payroll-related records where applicable, payment status, and timestamps of account activity.

We also collect technical information such as your IP address, device type, browser, app install state, and usage events. This helps us keep accounts secure, detect fraud, understand product performance, and improve the platform experience.

Crypto transactions are recorded on public blockchains. When you send crypto to your KivoraPay payment address, the transaction is publicly visible on the relevant network. KivoraPay records the transaction identifier, asset type, network, and amount to accurately apply your payment value. We do not control the public nature of blockchain data.

We use the information we collect to create and manage your account; process payments, invoices, merchant orders, payroll, payouts, and other supported platform activity accurately; detect and prevent fraud and unauthorized access; send transaction confirmations and important account notifications; resolve disputes and respond to support requests; measure product performance; and comply with applicable legal obligations.

We may send product education, feature updates, safety reminders, onboarding guidance, and service-related messages that explain how KivoraPay can be used by individuals, merchants, online businesses, and offline businesses. These messages are intended to help users understand and operate the product safely and effectively.

We do not sell your personal information or use it to run third-party advertising campaigns.

KivoraPay does not sell, rent, lease, or share your personal information with any third party for commercial or marketing purposes. Your data belongs to you.

To deliver our service we work with a small number of trusted third-party providers. Each provider receives only the minimum information necessary to perform their specific function.

Our third-party payment, settlement, fulfilment, merchant, payroll, payout, and biller providers receive only the payment or transaction details required to execute each supported service. These providers are independently responsible for their own compliance and data protection obligations.

We also use infrastructure, analytics, communication, and product measurement providers to host the app, send emails and notifications, understand usage, improve reliability, and diagnose product issues. These providers are used to operate and improve KivoraPay, not to sell user data.

We select our providers carefully and require that they maintain appropriate security standards.

Your information is stored on encrypted servers with access restricted to authorized systems only. We implement row-level security on our database so that users can only access their own data. All communication between your device and our platform is encrypted using industry-standard protocols. Sensitive credentials are stored in secure environment management systems and are never exposed in our codebase.

While we take every reasonable precaution, no system is completely immune to risk. In the event of a breach affecting your personal information we will notify you promptly and take immediate steps to contain and resolve the issue.

We retain your account and transaction data for as long as your account is active. If you request deletion of your account we will delete your personal information within 30 days, except where retention is required by law or for legitimate dispute resolution purposes. Transaction records may be retained for longer periods to comply with applicable record-keeping requirements.

You have the following rights regarding your personal data held by KivoraPay: the right to access a copy of your information; the right to request correction of inaccurate or incomplete information; the right to request deletion of your account and personal data; the right to withdraw consent for any processing based on your consent; and the right to lodge a complaint with a relevant data protection authority.

To exercise any of these rights please contact us at privacy@kivorapay.com. We will respond within 14 business days.

KivoraPay uses essential session cookies to keep you logged in, protect your account, remember trusted devices, and support the installed app experience. We also use analytics and product measurement tools to understand how the platform is used and where it needs improvement.

We do not sell cookie data. You can clear cookies through your browser settings, but clearing essential cookies may sign you out or remove trusted-device settings.

KivoraPay is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account we will delete the account and all associated data immediately.

Our platform may contain links to third-party websites or services. KivoraPay is not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party site you visit.

We may update this Privacy Policy to reflect changes in our practices or applicable law. When we make significant changes we will notify you via the email address on your account at least seven days before they take effect. The updated policy will always be available on the platform with the effective date clearly stated.

This Privacy Policy is governed by the laws of the Netherlands, including the EU General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG, UAVG). As a company incorporated in the Netherlands, we are subject to Dutch and EU data protection law in our handling of your personal information.

If you are located in another jurisdiction, you acknowledge that your information will be transferred to and processed in the Netherlands in accordance with this policy.

For any privacy-related questions, requests, or concerns please contact us at privacy@kivorapay.com. We are committed to resolving any concerns you have about how we handle your personal information.