tl;dr (no legalese)
here is the vibe.
- We collect only what we need to run your wallet — your name, BVN, NIN, phone, transactions.
- We never sell your data. Not to advertisers, not to data brokers, not to your bank.
- Payments & account info are handled by our regulated financial partners under NDPR.
- You can delete your account anytime from settings. We wipe your data in 30 days.
- Spotted misuse? Hit [email protected] — we respond in 48h.
1. who we are
Azabill is a product of CodeMatrix Consult LTD (RC 8290681), headquartered at 18 Cotonou Cres, Wuse, Abuja 900285, Federal Capital Territory. We are the data controller for the personal information we hold about you. Our Data Protection Officer can be reached at [email protected].
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have. We comply with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR).
2. what we collect
2.1 you give us
- Name, date of birth, phone number, email address.
- Identity documents — BVN, NIN, photo ID, selfie — for KYC verification.
- Your residential address.
- Your communications with us (SMS chats with Aza are stored for safety & quality).
2.2 collected automatically
- Device info — phone model, OS version, app version.
- Usage logs — what screens you view, what features you tap.
- Email engagement — whether you open the emails we send and which links you click, measured with a small tracking pixel and redirect links. This helps us understand what's useful and improve our messages. We do not track one-time security emails (login/verification codes and password-reset codes).
- Approximate location (city-level) from your IP — never GPS unless you grant permission.
- Crash reports and performance data.
2.3 from third parties
- Identity verification results from BVN/NIN providers.
- Bank account details & transaction history from your wallet account.
- Credit signals from licensed credit bureaus to set your tab limit.
3. how we use your data
- To open and operate your Azabill wallet.
- To process airtime, data & bill payments and credit transactions.
- To verify your identity and detect fraud or money laundering.
- To decide your credit limit and assess repayment risk.
- To send you transactional alerts (cannot opt out while you have an active wallet).
- To improve our app, our customer care, and our credit models.
- To measure whether our emails are opened and useful (opens and link clicks), so we can improve them — excluding one-time security emails.
- To send you marketing (you can opt out anytime in settings or by replying STOP).
4. who we share it with
We share only what is necessary, only with:
- Our regulated banking partners — to provision and operate your wallet account, issue your account number, and process transfers and card top-ups.
- Telcos and billers — when you pay a bill, we forward the minimum needed.
- Licensed credit bureaus — we report your repayment history.
- Law enforcement — only with a valid Nigerian court order.
We do not sell your data. Ever.
5. how long we keep it
As long as you have an account with us, plus a minimum of 5 years after closure (regulatory requirement). After that, we anonymize or delete your data.
6. your rights
- Access a copy of the data we hold about you.
- Correct anything inaccurate.
- Delete your account and your data (subject to legal retention).
- Restrict or object to certain uses.
- Withdraw consent for marketing at any time.
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
To exercise any of these rights, email [email protected] or use the in-app "Manage my data" flow.
7. security
We encrypt your data in transit and at rest. Production systems are access-controlled with hardware MFA. We run quarterly penetration tests, and our security program is aligned to:
- CIS Controls v8.1 — the Center for Internet Security global benchmark for cyber-defence.
- OWASP Top 10 — every release is scanned and hardened against the top web application risks.
- NIST Cybersecurity Framework — aligned across all five functions (Identify, Protect, Detect, Respond, Recover).
No system is 100%. Use a strong PIN, enable biometric login, and never share your password or OTP — including with anyone claiming to be from Aza.
8. children
Azabill is for users 18+. We do not knowingly collect data from minors.
9. changes to this policy
When we make material changes, we will notify you in-app and by email at least 30 days before they take effect.
10. contact
Data Protection Officer · [email protected]
By post · CodeMatrix Consult LTD, 18 Cotonou Cres, Wuse, Abuja 900285, Federal Capital Territory.
In-app support · live chat, 24/7.