Privacy Policy

1. Introduction

NextOp9ja ("we", "us", "our", "the App") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.

Please read this policy carefully. By using NextOp9ja, you consent to the practices described in this Privacy Policy. If you do not agree with our policies, please do not use our services.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Identity Data: Full name, username, date of birth;
• Contact Data: Email address, phone number;
• Financial Data: Wallet balance, transaction history, payment method details (processed securely by third-party payment gateways);
• Profile Data: Profile picture, preferences, transaction PIN (stored as a hash);
• Technical Data: Device type, operating system, IP address, app version, device identifiers.

2.2 Automatically Collected Information

When you use our App, we may automatically collect certain information, including:

• Usage data (pages visited, features used, time spent);
• Device information (model, OS version, unique device identifiers);
• Log data (crash reports, performance data);
• Location data (approximate location based on IP address).

3. How We Collect Your Information

We collect information through the following methods:

• Direct interactions: When you create an account, make transactions, contact support, or fill in forms;
• Automated technologies: As you navigate through the App, we may collect usage data using analytics tools;
• Third parties: We may receive information from payment processors, analytics providers, and service partners.

4. How We Use Your Information

We use your information for the following purposes:

• To provide, maintain, and improve our services;
• To process transactions and send transaction confirmations;
• To verify your identity and prevent fraud;
• To communicate with you about your account and our services;
• To send important notices, such as changes to our terms or policies;
• To provide customer support and respond to your inquiries;
• To analyze usage patterns and improve user experience;
• To comply with legal obligations and regulatory requirements.

5. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary to perform our contract with you (e.g., processing transactions);
• Legitimate Interests: Processing for our legitimate business interests (e.g., improving the App, fraud prevention);
• Consent: Where you have given explicit consent (e.g., for marketing communications);
• Legal Obligation: Processing required to comply with applicable laws.

6. Data Sharing & Disclosure

We may share your information with the following categories of third parties:

• Payment Processors: Paystack, Monnify — to process your payments securely;
• Service Providers: UfitPay, MyPayConnect, Ogdams, Subsizi, Bolld — to fulfill VTU services;
• Analytics Providers: To help us understand how the App is used;
• Cloud Services: Cloudinary, Firebase — for file storage;
• Email Service: Brevo (Sendinblue) — to send transactional emails;
• Legal Authorities: When required by law or to protect our rights.

We do NOT sell your personal information to third parties.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest;
• Secure JWT-based authentication with token refresh;
• PIN-based transaction verification;
• Regular security audits and monitoring;
• Access controls and least-privilege principles;
• Secure third-party payment gateways (PCI-compliant).

However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, or reporting requirements.

• Account data: Retained for the duration of your account plus 90 days after closure;
• Transaction data: Retained for 6 years for regulatory compliance;
• Communication data: Retained for 3 years after the last interaction.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Right to Access: Request copies of your personal data;
• Right to Rectification: Request correction of inaccurate data;
• Right to Erasure: Request deletion of your data (subject to legal obligations);
• Right to Restrict Processing: Request restriction of processing;
• Right to Data Portability: Request transfer of your data to another service;
• Right to Object: Object to processing based on legitimate interests;
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at support@easypay.ng.

10. Children Privacy

NextOp9ja is not intended for children under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information promptly.

11. Third-Party Links

The App may contain links to third-party websites or services (e.g., Paystack checkout pages). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.

12. Cross-Border Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place for such transfers, including Standard Contractual Clauses (SCCs) where required by applicable law.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where appropriate, via email or in-app notification. The "Last updated" date at the top of this policy indicates when it was last revised.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: