Privacy Policy

This Privacy Policy explains how KONECTGATE Integrated Solutions Limited ("KONECTGATE", "we", "us") collects, uses, discloses, and protects personal data when you use the KREO website, mobile applications, APIs, and merchant dashboard (the "Platform"). It applies to merchants, their authorised users, and visitors to our website.

Account & KYC data: business name, registration details, BVN consent confirmation token (we never store the BVN itself, only the token issued by NIBSS iGree), and contact information.

Transaction data: eNaira receipts, settlement records, and NIP transfer references processed through the Platform.

Usage data: pages visited, features used, device and browser information, and log data collected via cookies (see our Cookie Policy).

Communications: messages you send us through the contact form, email, or support channels.

We use personal data to: operate and maintain the Platform; verify merchant identity and conduct KYC/AML checks; process eNaira transactions and NIP settlements; provide customer support; detect and prevent fraud; comply with CBN, NIBSS, and NDPR regulatory obligations; and improve the Platform through privacy-first, aggregated analytics.

We process personal data under the Nigeria Data Protection Regulation (NDPR) 2019 on the basis of: your consent (e.g. BVN verification via NIBSS iGree); performance of our contract with you as a registered Merchant; and compliance with legal obligations, including CBN AML/CFT Regulations and NIBSS regulatory reporting requirements.

We share data only where necessary to operate the Platform: with NIBSS (iGree consent verification, NIP settlement, NQR registry), the CBN eNaira platform, our Sponsor FI for settlement processing, and regulators where legally required. We do not sell personal data, and we do not share data with third-party advertisers or ad networks.

We retain personal data only as long as necessary for the purposes described in this Policy, or as required by CBN and NIBSS regulatory reporting obligations. BVN consent tokens and transaction records are retained in line with CBN AML/CFT record-keeping requirements. You may request deletion of data we are not legally required to retain.

We protect personal data with mTLS encryption in transit, encryption at rest, and CBN AML/CFT transaction screening. Access to merchant data is restricted to authorised personnel on a need-to-know basis. Despite these measures, no system is completely secure, and we cannot guarantee absolute security.

Under the NDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of data we are not legally required to retain; withdraw consent where processing is based on consent; and lodge a complaint with the National Information Technology Development Agency (NITDA). To exercise these rights, contact us using the details in Section 11.

The Platform uses cookies to authenticate sessions, remember your preferences, and understand platform usage. Required cookies cannot be disabled; functional and analytics cookies can be managed at any time. See our Cookie Policy for full details.

The Platform is intended for use by registered businesses and their authorised representatives. We do not knowingly collect personal data from individuals under the age of 18.

We may update this Privacy Policy from time to time. Material changes will be notified at least 14 days in advance via the email address or phone number on file, and continued use of the Platform after that date constitutes acceptance of the updated Policy.

For questions about this Privacy Policy or to exercise your data rights, contact us at info@konectgate.com, or write to KONECTGATE Integrated Solutions Limited, Lagos, Nigeria.