Privacy Policy

Last updated: September 12, 2026

This policy explains how Nerat Technologies Ltd. ("we", "us", "our") collects, uses, and protects information across our products, including NeratPay, NeratSubs, and Nerat Insight (together, the "Services"). By creating an account or using any of the Services, you agree to the practices described here.

1. Information we collect

We collect the following categories of information:

• Account information — name, username, email address, phone number, and password (stored as a one-way hash, never in plain text).
• Identity verification information — where a Service requires it to issue a dedicated virtual bank account, we collect your Bank Verification Number (BVN) or National Identification Number (NIN). This is sent directly to our licensed banking/payment partner for verification and is encrypted at rest in our systems (AES-256). We never display your full BVN or NIN back to you or any third party after verification.
• Transaction information — wallet balance, funding history, purchases, amounts, timestamps, and reference details you provide for a transaction (such as a phone number or meter number).
• Device and usage information — basic technical data (device type, app version, IP address) collected automatically to keep the Services secure and working correctly.

2. How we use your information

• To create and maintain your account and wallet.
• To process transactions you request (purchases, transfers, virtual account funding).
• To verify your identity where required by our banking or payment partners, or by law.
• To detect and prevent fraud, abuse, and unauthorized access.
• To communicate with you about your account, transactions, or support requests.
• To comply with applicable legal and regulatory obligations.

3. Who we share information with

We do not sell your personal information. We share information only where necessary to provide the Services:

• Banking and payment partners (e.g. Paystack, Gafiapay) — to process payments and issue dedicated virtual bank accounts, including the identity verification described above.
• Service aggregators — to fulfil specific purchases you request (e.g. airtime/data providers or social media growth panels), we share only what's needed to complete that purchase, never your full account or financial details.
• Infrastructure providers — cloud hosting and database providers that store data on our behalf, under contractual confidentiality obligations.
• Law enforcement or regulators, where legally required.

4. Data security

We use industry-standard safeguards to protect your information, including encryption of sensitive identifiers (such as BVN/NIN) at rest, hashed passwords and transaction PINs, and access controls limiting who within our organization can view sensitive data. No method of transmission or storage is completely secure, but we work to protect your information using commercially reasonable means.

5. Data retention

We retain account and transaction information for as long as your account is active, and afterward for as long as needed to comply with legal, tax, or regulatory obligations, resolve disputes, and enforce our agreements.

6. Your rights

Depending on your location, you may have the right to access, correct, or request deletion of your personal information, or to object to certain processing. To exercise these rights, contact us using the details below.

7. Children's privacy

The Services are not directed to children under 18, and we do not knowingly collect information from them.

8. Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above when we do, and, for material changes, provide additional notice where appropriate.

9. Contact us

Questions about this policy or your information? Contact us at privacy@nerat.app.