Privacy Policy

IdentifyOrg is the controller of the personal data of people who create an account with us. When a business uses our services to check or pay someone else, that business decides why the checks are made and we process the data for it as its service provider. You can reach us through the contact page or on +234 913 995 7618.

Depending on what you use, we collect:

• Account details: your name or business name, email address, phone number, password (stored only as a one-way hash), profile picture, and, if you sign in with Google or Apple, the identifier and email they share with us.
• Checks you run: the details you submit to verify a person or business (for example a BVN, NIN, driver's licence number, bank account number, a photo or document), and the result, time and cost of each check.
• Address checks: the address you enter, the phone location the person chooses to share through the link we send, and any utility bill or statement they upload.
• Money: top-ups, wallet balance, bill purchases, payments you collect and withdrawals. Card and bank details are handled by our licensed payment partners; we do not store full card numbers.
• Messages: if you use the WhatsApp assistant or phone verification, the messages sent and received on your linked number, the business information you give the assistant, and the codes we send.
• Meetings and calls: you can join with a camera and microphone. We do not record meetings. If a host saves the chat as notes, those notes are stored.
• Technical data: device type, app version, IP address, error logs and how the service is used, so we can keep it secure and working.

• To provide the service you asked for: run checks, take and move money, send codes, answer customers, host meetings.
• To keep the service safe: prevent fraud and misuse, enforce limits, and investigate problems.
• To bill you and to keep the financial and audit records the law expects.
• To support you, and to tell you about changes, offers and news (you can opt out of marketing at any time).
• To improve the service, using usage statistics.

We rely on your consent (for example when you share a location or a selfie), on the need to carry out our contract with you, on our legal obligations (such as financial records), and on our legitimate interests in security and in improving the service, balanced against your rights.

We do not sell personal data. We share it only with:

• Data and identity providers, banks and payment networks, so that a check or payment can be completed.
• Service providers that run our platform: hosting, email and SMS delivery, video infrastructure, analytics and customer chat.
• AI providers, when you use features that read or write text, such as the WhatsApp assistant or the AI content detector. Only the content needed for that request is sent.
• Authorities and courts when the law requires it, and professional advisers under confidentiality.

Some of these providers may process data outside Nigeria. We choose providers that protect data to a standard comparable to the NDPA and we limit what we send.

The IdentifyOrg app asks for these permissions only when you use the feature that needs them:

• Camera and microphone: to join meetings and video calls.
• Photos: to choose an image or video for the AI content detector or for a logo.
• Fingerprint or face unlock: to unlock the app. Your biometric data stays on your phone and is never sent to us. The phone only tells the app whether it matched.
• Notifications and network access: to work and to keep you signed in securely.

You can turn any permission off in your phone settings. The feature that needs it will then stop working.

We keep personal data only as long as it is needed to run and bill the service and to meet legal duties. Records of money movements and of checks are kept for financial and audit purposes. When you delete your account we remove your personal data (see section 9). Records we must keep for the books stay, without your name, email or phone.

We encrypt traffic in transit, store passwords as one-way hashes, limit staff access to what they need, and monitor for misuse. No system is perfectly secure. If a breach puts your data at risk we will tell you and the regulator as the law requires.

Under the NDPA you can ask to see your data, correct it, delete it, restrict or object to how we use it, take a copy of it, withdraw consent, and complain to the Nigeria Data Protection Commission.

To delete your account: in the app go to Me, then Delete my account, or use the account deletion page. Deleting removes your sign-in, keys, domains, tickets, short links, meetings, WhatsApp numbers and chats, webhooks and your Google or Apple link. You must first use or withdraw any money in the account. Records of past payments are kept without your personal details.

For any other request, contact us and we will respond within a reasonable time and in line with the law.

Our website uses cookies and similar tools to keep you signed in, remember settings such as light or dark mode, measure how the site is used, and run our live chat. You can block cookies in your browser; some parts of the site may then not work.

Our services are for adults and businesses. We do not knowingly collect data from anyone under 18. If you think a child has given us data, tell us and we will remove it.

We may update this policy. If a change matters, we will tell you in the app, by email or on the website before it applies. The date at the top shows the latest version.