Privacy Policy — CHIBLESS DATA SERVICES

1. Overview & Commitment

CHIBLESS DATA SERVICES ("we", "us", or "our") is committed to protecting your privacy. This policy explains what information we collect when you use our automated VTU platform, mobile web application, and API, how we use it, and how we protect your personal and transactional information under the Nigeria Data Protection Act (NDPA) and NDPR.

2. Information We Collect

We adhere to strict data minimization. We only collect details necessary to process VTU purchases and maintain ledger balances:

Contact & Account Details: Your mobile phone number, email address, and account name.
Transaction Identifiers: Recipient phone numbers for airtime or data bundles, network operator selected (MTN, Glo, Airtel, 9mobile), purchase amounts, and timestamps.
Security & Device Context: IP address, device user-agent, and transaction session IDs to detect unauthorized attempts and prevent account takeover.

Note on Financial Details: We never store your full payment card numbers or bank BVN. Card payments and bank transfers are tokenized and processed directly by our licensed PCI-DSS compliant partner, Bachs (and approved payment gateways).

3. How We Use Your Data

To instantly fulfill data and airtime top-ups with upstream telecom networks.
To maintain an immutable, double-entry ledger balance for customer wallets.
To send purchase confirmation receipts, refund notices, and OTP login verification codes.
To detect and mitigate automated fraud, multi-accounting abuse, and suspicious transaction velocities.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We disclose transaction parameters only to essential infrastructure partners required to execute services:

Telecom partners and aggregators: To route data and airtime to recipient SIMs.
Payment Processors (Bachs Technologies): For funding wallet balances securely via cards, bank transfers, and USSD.
Transactional Email (SendByte Africa): For delivering receipts and password reset emails.

5. Security & Encryption

All communication is encrypted via TLS 1.3. Sensitive secrets and integration keys are secured at rest using AES-256-GCM. Passwords and transaction PINs are irreversibly hashed using salted cryptographic algorithms.

6. Your Rights & Contact

Under Nigerian privacy regulations, you have the right to request access to your transaction records, request correction of inaccurate details, or request account closure. For any privacy queries, contact our Data Protection desk via WhatsApp at our official line or email privacy@chiblessdata.com.