Privacy Policy
Your privacy and data security are our top priorities. Learn how Ultra Pay protects and manages your personal information.
Last Updated: December 15, 2024
Data Security
Bank-grade encryption and security protocols protect all your financial data
Transparency
Clear and transparent data collection and usage practices
User Control
You have full control over your personal data and privacy settings
Table of Contents
Introduction
Welcome to Ultra Pay, a leading fintech platform providing AI-powered payment gateway solutions, government revenue systems, POS systems, mobile banking applications, and innovative financial technology services. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our platform, mobile applications, and services.
Ultra Pay is committed to protecting your privacy and ensuring the security of your personal and financial data. As a financial technology company operating in Nigeria and serving government entities, businesses, and individual users, we adhere to the highest standards of data protection and privacy compliance.
Information We Collect
Personal Information
- Identity Information: Full name, date of birth, gender, nationality, government-issued ID numbers (NIN, BVN, driver's license, international passport)
- Contact Information: Email address, phone numbers, residential address, business address
- Professional Information: Employment details, business information, income details, source of funds
- Biometric Data: Fingerprints, facial recognition data for identity verification and authentication
Financial Information
- Banking Details: Bank account numbers, account names, bank codes, transaction history
- Payment Information: Credit/debit card details, payment methods, transaction amounts and frequencies
- Wallet Information: Digital wallet balances, transaction history, payment preferences
- Credit Information: Credit scores, loan applications, repayment history, financial assessments
Technical Information
- Device Information: Device type, operating system, device ID, mobile network information
- Location Data: GPS location, IP address, timezone, geolocation for fraud prevention and service delivery
- Usage Data: App usage patterns, feature interactions, session duration, click-through rates
- Security Data: Login attempts, security questions, device fingerprinting for fraud prevention
Business and Government Data
- Business Information: Company registration details, tax identification numbers, business licenses
- Government Revenue Data: Tax collection information, internally generated revenue data, payment records
- POS Transaction Data: Merchant transaction details, sales data, inventory information
- API Integration Data: Third-party service connections, integration logs, system performance metrics
How We Use Your Information
Service Delivery
- Processing payments, money transfers, and financial transactions
- Providing payment gateway services for businesses and government entities
- Operating POS systems and offline payment solutions
- Delivering AI-powered WhatsApp chatbot customer support
- Managing digital wallets and mobile banking services
- Facilitating government revenue collection and optimization
Security and Compliance
- Know Your Customer (KYC) verification and identity authentication
- Anti-Money Laundering (AML) compliance and suspicious activity monitoring
- Fraud detection and prevention using AI and machine learning
- Risk assessment and credit scoring
- Regulatory reporting to financial authorities and government agencies
- Transaction monitoring and suspicious activity reporting
Product Improvement and Analytics
- Analyzing usage patterns to improve our fintech platform
- Developing AI-powered insights for revenue optimization
- Enhancing payment gateway performance and reliability
- Personalizing user experiences and service recommendations
- Conducting market research and financial trend analysis
- Improving mobile app functionality and user interface
Communication and Marketing
- Sending transaction notifications and account updates
- Providing customer support through multiple channels
- Sharing financial insights and market updates
- Marketing our fintech services and new features (with your consent)
- Conducting surveys and collecting feedback
- Delivering personalized offers and promotions
Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
We only share your information in the following circumstances:
Financial Service Providers
We share necessary information with banks, payment processors, and financial institutions to process transactions and provide our services.
Government and Regulatory Authorities
We may disclose information to comply with legal obligations, court orders, regulatory requirements, and government revenue collection mandates.
Service Providers and Partners
We share data with trusted third-party service providers who help us deliver our services, including cloud infrastructure providers (Google Cloud Platform), analytics providers, and security services.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that business transaction.
Legal and Safety
We may disclose information when we believe it's necessary to protect our rights, prevent fraud, ensure security, or comply with law enforcement requests.
Data Security
Ultra Pay employs industry-leading security measures to protect your personal and financial information:
Technical Safeguards
- AES-256 encryption for data at rest
- TLS 1.3 encryption for data in transit
- Multi-factor authentication (MFA)
- Biometric authentication
- Real-time fraud monitoring
- Secure API gateways
Operational Safeguards
- Regular security audits and penetration testing
- Employee background checks and training
- Access controls and role-based permissions
- Incident response procedures
- Data backup and disaster recovery
- Compliance monitoring and reporting
Your Privacy Rights
As a user of Ultra Pay's services, you have the following rights regarding your personal information:
Right to Access
You can request a copy of all personal information we hold about you.
Right to Rectification
You can request correction of any inaccurate or incomplete personal information.
Right to Erasure
You can request deletion of your personal data, subject to legal and regulatory requirements.
Right to Portability
You can request your data in a structured, machine-readable format for transfer to another service.
Right to Object
You can object to processing of your personal data for marketing or other purposes.
Right to Restrict Processing
You can request temporary restriction of processing in certain circumstances.
Mobile App Privacy
The Ultra Pay mobile application collects additional information to provide enhanced fintech services:
Device Permissions
- Camera: For document scanning, QR code payments, and identity verification
- Location: For ATM locator, branch finder, and fraud prevention
- Contacts: For easy money transfers to saved contacts (with your permission)
- SMS: For transaction notifications and OTP verification
- Biometrics: For secure app access and transaction authentication
- Storage: For caching data and offline functionality
Push Notifications
We send push notifications for transaction alerts, security updates, and important account information. You can disable these in your device settings.
Offline Data Storage
Our app stores transaction data locally to enable offline payments. This data is encrypted and synchronized when you reconnect to the internet.
International Data Transfers
Ultra Pay may transfer your personal data to countries outside Nigeria for the following purposes:
Cloud Infrastructure
We use Google Cloud Platform services, which may involve data processing in various global locations with appropriate safeguards.
International Payments
Cross-border transactions may require sharing data with international financial institutions and payment networks.
Service Providers
We work with international service providers for security, analytics, and technical support services.
All international transfers are conducted in accordance with applicable data protection laws and include appropriate safeguards to protect your personal information.
Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations:
Children's Privacy
Ultra Pay services are not intended for individuals under 18 years of age.
We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to remove such information and terminate the child's account.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you through the Ultra Pay app or by email
- Provide prominent notice on our website
- For material changes, obtain your consent where required by law
Your continued use of Ultra Pay services after any changes constitutes acceptance of the updated Privacy Policy.
Contact Us
If you have questions about this Privacy Policy or how we handle your personal information, please contact our Data Protection Officer:
Data Protection Officer
Response Time
- • General inquiries: 24-48 hours
- • Data access requests: 30 days
- • Data deletion requests: 7-14 days
- • Security concerns: Immediate
Regulatory Compliance
Ultra Pay operates in compliance with applicable Nigerian financial and data protection regulations, including:
- Nigeria Data Protection Regulation (NDPR)
- Central Bank of Nigeria (CBN) Guidelines
- Financial Intelligence Unit (NFIU) Requirements
- Anti-Money Laundering/Combating the Financing of Terrorism (AML/CFT) Laws
- Consumer Protection Framework
We are committed to maintaining the highest standards of regulatory compliance and data protection in all our operations.
Questions About Your Privacy?
Our team is here to help you understand how we protect your personal information and answer any questions about our privacy practices.