Privacy Policy

Introduction

2. How We Use Your Information

We use your information solely for the following purposes:

• To create and manage your VendPower account
• To process electricity vending transactions on your behalf
• To validate meter numbers and deliver electricity tokens
• To manage your wallet balance, deposits, withdrawals, and commission tracking
• To send transaction confirmations, receipts, and status updates
• To detect, prevent, and investigate fraudulent or unauthorised activity
• To respond to your support requests and resolve disputes
• To comply with applicable laws, regulations, and legal obligations
• To improve platform performance, features, and user experience

We do not use your personal information for unsolicited marketing without your explicit consent.

3. How We Share Your Information

We do not sell, rent, or trade your personal information to any third party.

We may share limited information with the following categories of third parties, strictly to provide our services:

• Payment processors — to process wallet funding and transaction settlements
• Electricity distribution companies (DISCOs) — to validate meters and deliver tokens
• Identity verification providers — to comply with KYC and anti-fraud requirements
• Cloud infrastructure and hosting providers — to store and process data securely
• Customer support tools — to enable efficient resolution of support tickets

All third parties are required to handle your information securely and are prohibited from using it for any purpose other than providing services to VendPower. We may also disclose your information if required by Nigerian law or a lawful request from a government or regulatory authority.

5. API Access and Integrators

If you access VendPower services via our API, all API requests are logged including your API key identifier, request timestamps, endpoint accessed, and response status. This data is used for security monitoring, fraud prevention, debugging, and billing.

API credentials are your responsibility. Do not share your API keys. If you believe your key has been compromised, revoke it immediately from your dashboard and contact our support team.

6. Cookies

We use cookies and similar technologies to keep you logged in across sessions, remember your preferences, track anonymous usage statistics, and detect suspicious activity. You may configure your browser to refuse cookies, but doing so may limit certain features of the platform.

7. Data Security

We implement industry-standard security measures to protect your personal information. These measures include:

• End-to-end encryption for sensitive data in transit (TLS/HTTPS)
• Encryption of stored sensitive data at rest
• Role-based access controls limiting employee access to personal data
• Regular security audits and vulnerability assessments
• Multi-factor authentication options for account access
• Firewall protection and intrusion detection systems

In the event of a data breach that affects your rights, we will notify you in accordance with applicable Nigerian data protection regulations (NDPR/NDPA).

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Upon account deactivation:

• Operational data is removed from active systems within 30 days
• Transaction and financial records are retained for up to 7 years to comply with legal obligations
• Anonymised, aggregated data may be retained indefinitely for analytics purposes

9. Your Rights

As a user of VendPower, you have the following rights under the Nigeria Data Protection Act (NDPA) and Nigeria Data Protection Regulation (NDPR):

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to deletion — request deletion of your personal data, subject to legal retention obligations
• Right to object — object to certain uses of your data, including marketing
• Right to data portability — request your data in a structured, machine-readable format
• Right to withdraw consent — where processing is based on consent, you may withdraw at any time

To exercise any of these rights, contact us using the details in Section 12. We will respond within 30 days.

10. Children's Privacy

VendPower is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has registered on our platform, we will delete their data promptly.

11. Changes to This Policy

We reserve the right to update this Privacy Policy from time to time. When we make significant changes, we will update the "Last Updated" date at the top of this page and notify registered users via email or in-app notification. Your continued use of VendPower after changes are posted constitutes your acceptance of the updated policy.