Privacy Policy

Data Protection, Sovereignty, and User Rights.

Effective: February 20, 2026

"Payefy is committed to the highest standards of data privacy, adhering to the NDPR 2019 and global security best practices."

1. Scope

This Privacy Policy governs the processing of Personal Data by Payefy in connection with our web platform and API services. It is drafted in strict adherence to the Nigeria Data Protection Regulation (NDPR) 2019.

2. Information We Collect

To provide specialized institutional services, we collect:

A. Identity Data: Full Legal Name, Matriculation Number, Faculty, and BVN (for wallet tier verification).

B. Financial Data: Transaction history and payment references. We do not store card PINs or CVVs. All processing is PCI-DSS compliant.

3. Data Retention

Transactional data is retained for 7 years post-settlement in compliance with the Money Laundering (Prohibition) Act. Account data is retained for the duration of studentship plus 2 years for alumni verification.

Require clarification?

Our legal and compliance teams are available to address your specific institutional inquiries.