Privacy Policy

Last Updated: September 10, 2026

1. Introduction

At Billswave Projects Ltd. ("Billswave", "we", "our", or "us"), protecting your privacy and ensuring the security of your personal and financial data is core to our mission. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, integrate our payment APIs, use our virtual account creation services, setup digital storefronts, or interact with any of our software systems.

By using our Services, you consent to the data practices described in this policy. If you do not agree with the terms outlined here, please refrain from accessing or using our platform.

2. Information We Collect

To provide reliable fintech solutions, process transactions, and meet statutory regulatory compliance, we collect information from merchants, business owners, end customers, and software developers using our platform.

A. Personal Identification Information:

• Full legal name, date of birth, and nationality.
• Contact details including email address, phone number, and physical mailing address.
• Government-issued identification details (e.g., NIN, BVN, Driver's License, International Passport) collected strictly for Know Your Customer (KYC) compliance.

B. Business & Merchant Information:

• Registered business name, Corporate Affairs Commission (CAC) registration numbers, tax identification numbers (TIN), and legal business documentation.
• Settlement bank account details, merchant category code, store description, and operational location.

C. Transaction and Payment Data:

• Details of financial transactions processed through our APIs or virtual account infrastructure, including transaction timestamps, amounts, currency, payor/payee account details, and transaction references.
• Virtual account creation logs and webhook delivery payloads.

D. Technical & Device Data:

• IP address, browser type, operating system, system performance logs, API request payloads, user-agent details, and device identifiers collected automatically when accessing our endpoints or user dashboard.

3. How We Use Your Information

We process your data for specific, lawful operational purposes, including:

• Service Delivery: Facilitating automated payment processing, generating dynamic virtual accounts, processing payouts, and managing merchant digital storefronts.
• Identity Verification & KYC: Verifying user identities, preventing impersonation, fulfilling Know Your Customer (KYC) requirements, and complying with Anti-Money Laundering (AML) standards.
• Fraud Prevention & Risk Management: Monitoring transaction patterns in real time to detect fraudulent activities, unauthorized API access, chargeback risks, or security threats.
• API & Platform Communication: Sending transactional alerts, webhook notifications, system updates, developer updates, invoices, and support responses.
• Product Improvement: Analyzing platform metrics, debugging API logs, and enhancing platform performance, uptime, and user experience.

4. Disclosure and Data Sharing

We do not sell, rent, or trade your personal data to third parties or advertisers. However, to operate effectively as a financial technology engine, we may share information with trusted third parties under strict confidentiality standards:

• Licensed Financial Partners: Our partner commercial banks, microfinance banks, payment terminal operators, and card processing networks that provision virtual accounts and settle payment funds.
• Regulatory Authorities: Law enforcement agencies, financial intelligence units (e.g., NFIU, EFCC), or regulatory bodies when legally mandated by court order or applicable financial regulations.
• KYC Verification Partners: Identity verification providers used to validate BVNs, NINs, business registration credentials, and address histories.
• Core Infrastructure Providers: Secure cloud web hosting, database providers, and error tracking systems that support the stability and security of Billswave operations.

5. Data Security and Storage

We employ enterprise-grade technical and organizational security measures designed to protect your data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• End-to-end TLS/SSL encryption for data in transit across all web traffic and API endpoints.
• AES-256 bit encryption for sensitive user data stored at rest.
• Strict API authentication mechanics utilizing bearer tokens, secret key hashing, and IP whitelisting.
• Continuous monitoring, vulnerability assessments, and strict role-based internal access controls.

While we enforce industry-standard security protocols, no transmission over the Internet or electronic storage mechanism can be guaranteed to be 100% secure. You remain responsible for safeguarding your dashboard credentials and private API keys.

6. Data Retention Policy

We retain your personal and transactional information for as long as your account remains active or as needed to provide our Services. Following account termination, we retain relevant data for a mandatory period (typically 5 to 10 years depending on financial legislation) to meet statutory record-keeping, anti-money laundering regulations, tax requirements, and dispute resolution needs.

7. Your Privacy Rights

Depending on your jurisdiction, you possess specific legal rights regarding your personal information, including:

• Right to Access: The right to request copies of the personal data we hold about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal records.
• Right to Erasure: The right to request the deletion of your personal data, subject to statutory limitations and regulatory data retention obligations.
• Right to Restrict Processing: The right to request that we restrict the processing of your data under specific operational circumstances.

To exercise any of these rights, please submit a formal request to our Data Protection Officer at hi@billswave.com.

8. Cookies and Tracking Technologies

We use essential cookies, local storage sessions, and similar technical markers to maintain your authenticated session on the merchant dashboard, remember platform preferences, and safeguard user interaction with our web interfaces. You can configure your web browser to reject cookies, though doing so may impact platform functionality.

9. Third-Party Links & Merchant Storefronts

Our platform enables merchants to create online storefronts and process third-party transactions. Billswave is not responsible for the privacy practices, content, or policies of third-party websites or merchant stores linked through our Services. We encourage end customers to review the specific terms and privacy policies of individual merchants before making payments.

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our legal obligations, operational features, or technological enhancements. We will notify you of any material changes by updating the "Last Updated" date at the top of this policy and publishing a notification within your dashboard or via direct email.

11. Contact Our Privacy Team

If you have questions, feedback, or complaints regarding this Privacy Policy or our data protection practices, please contact us at:

Email: hi@billswave.com
Phone: +2348141248915
Address: 18 Ata Idung street, Uyo, Akwa Ibom, Nigeria.