Privacy Policy

Welcome to DevPoint (referred to as "we", "us", "our", or "the Platform"). DevPoint is committed to safeguarding the privacy and security of our users' personal and financial data. This Privacy Policy explains how we collect, use, process, and protect your information when you access our services, web application, and digital fintech hub.

This policy is prepared in strict compliance with the Nigeria Data Protection Act (NDPA), the Nigeria Data Protection Regulation (NDPR), and directives from theCentral Bank of Nigeria (CBN) regarding consumer protection and data security in digital financial services.

By registering an account with DevPoint, you consent to the collection, transfer, storage, and processing of your information as described herein.

To provide secure fintech services and comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations, we collect the following categories of information:

• Identity & KYC Data: Legal first and last name, date of birth, gender, and photograph (selfie).
• Government Identifiers: Bank Verification Number (BVN) and government-issued identification (National Identity Number - NIN, Voter's Card, or Driver's License) to verify your identity.
• Contact Information: Active phone number, email address, and home address.
• Financial Data: Bank account numbers, wallet balances, and transaction histories. Card details are securely processed directly by our licensed payment gateways (e.g., Paystack) and are never stored on our servers.
• Technical Data: IP address, device type, browser specifications, operating system, and geolocation (to prevent fraudulent transactions originating from restricted territories).

We process your personal information for specific, legitimate business purposes, including:

• Service Delivery: Setting up and managing your DevPoint secure wallet, enabling transfers, and facilitating bills, airtime, and utility bundle payments.
• Identity Verification: Verifying your identity through licensed third-party platforms to ensure compliance with AML rules.
• Fraud Detection & Security: Monitoring transaction activities for suspicious behavior, raising automatic AML compliance alerts, and preventing unauthorized account access.
• Notifications & Communications: Sending receipts, transaction confirmations, security alerts, and announcements (e.g., welcome notifications or promotional alerts).
• Customer Support: Resolving transaction disputes, payment issues, and responding to inquiries.

DevPoint does not sell, lease, or trade your personal information to third parties. We only share your data with licensed partners and service providers under strict data processing agreements:

• Payment Processors: We partner with licensed gateways like Paystack to process card payments and deposits securely.
• Identity Verification Services: We use authorized partners such as Dojah,Smile Identity, and VerifyMe to validate your BVN and government IDs in real-time.
• Compliance & Regulatory Authorities: We may share data with the Central Bank of Nigeria (CBN), the Economic and Financial Crimes Commission (EFCC), or other law enforcement agencies when legally required to comply with AML reporting obligations.

We take information security extremely seriously. DevPoint employs robust administrative, technical, and physical safeguards to protect your data from unauthorized access, modification, or disclosure:

• AES-256 Encryption: Sensitive data (such as KYC details and transaction records) is encrypted at rest using the advanced AES-256-GCM standard with a secure key management system.
• Transport Layer Security (TLS): All data transmitted between your browser and our servers is encrypted in transit using HTTPS (TLS 1.3).
• Two-Factor Authentication (2FA): All transactions require custom secure PINs and/or biometric verification.
• Strict Internal Access Controls: Staff access to user database records is strictly limited and audited.

Under the Nigeria Data Protection Regulation (NDPR), you have the following rights regarding your data:

• Right to Access: You can request a summary of the personal data we hold about you.
• Right to Rectification: You can update or correct inaccurate data in your profile settings.
• Right to Erasure (Deletion): You may request the deletion of your account and personal data. However, please note that we are legally mandated by CBN AML guidelines to retain transaction records for a minimum of five (5) years even after account closure.
• Right to Object/Restrict: You can opt out of marketing communications or restrict certain data processing activities.

To exercise any of these rights, please email our Data Protection Officer at compliance@devpoint.space.