This Privacy Policy explains how Plustive Impact Communication Limited (“Plustive”, “we”, “us”) collects, uses, shares and protects personal data in connection with the Plustive API and related services. It is aligned to the Nigeria Data Protection Act and the NDPR. If you process the personal data of your own customers through Plustive, you are the controller of that data and we act as your processor.
1. Data we collect
- Account data: business name, contact name, email address, and authentication details for the people you authorise to use your account.
- Transaction data: the details needed to deliver a purchase — for example a recipient phone number, meter number or smartcard number — together with amounts, references and the resulting status.
- Financial data: wallet funding and balance records. We do not store full card details.
- Technical data: IP address, request logs, device and usage information used to operate, secure and debug the Services.
2. How we use data
- to provide the Services, deliver the transactions you submit, and reconcile and refund where needed;
- to operate, secure, monitor and improve the platform, and to prevent fraud and abuse;
- to provide support and to communicate with you about your account and service changes; and
- to comply with our legal and regulatory obligations.
3. Legal bases
We process personal data on the bases permitted under Nigerian data-protection law, including performance of our contract with you, our legitimate interests in operating and securing the Services, compliance with legal obligations, and consent where it applies.
4. Sharing
We share the minimum data necessary with the telecommunications networks, billers and infrastructure partners required to deliver the transactions you request, and with service providers that help us run the platform (such as hosting, communications and payment infrastructure). These parties process data on our instructions or as required to fulfil the service. We do not sell personal data. We may disclose data where required by law or to protect our rights and the integrity of the Services.
5. Recipient data and your responsibilities
When you submit a transaction, you provide details about your end customer (for example, the number being topped up). You are responsible for having a lawful basis to share that data with us and for any notice or consent your customers require. We process it only to deliver and reconcile the transaction.
6. Retention
We keep personal data for as long as your account is active and as needed to provide the Services, then for the period required to meet legal, accounting, audit and dispute-resolution obligations, after which it is deleted or anonymised.
7. Security
We use technical and organisational measures appropriate to the risk — including encryption in transit, access controls and segregated credentials — to protect personal data. No method of transmission or storage is perfectly secure, but we work to protect your data and to respond promptly to any incident.
8. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and request portability. To exercise a right, contact us using the details below. You also have the right to lodge a complaint with the Nigeria Data Protection Commission.
9. International transfers
Some service providers may process data outside Nigeria. Where that happens, we take steps to ensure an adequate level of protection consistent with Nigerian data-protection law.
10. Cookies
This marketing site uses only the cookies necessary for it to function and, where applicable, privacy-respecting analytics. We do not use advertising trackers.
11. Changes
We may update this policy from time to time. Material changes will be communicated through the dashboard or by email, and the “last updated” date above will change.
12. Contact
For privacy questions or to exercise a right, email contact@plustiveimpact.com.