1. Introduction
KryptWave is a product of SociapexPro Ltd, a company registered with the Corporate Affairs Commission (CAC) of Nigeria ("KryptWave", "we", "us", or "our"). This Privacy Policy describes how we collect, use, store, share, and protect your personal data when you use our website, mobile services, API, and related products (the "Services").
By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.
2. Information we collect
2.1 Information you provide
- Account information: full name, email address, phone number, password (hashed), date of birth.
- Identity verification (KYC) data: legal name, government-issued ID details, selfie, residential address, and other information required by Nigerian regulators, collected and processed through our licensed partner Busha.
- Bank account information: bank name, account number, and account holder name, used to settle fiat payouts.
- Transaction information: wallet addresses, crypto amounts, Naira amounts, timestamps, and transaction references.
- Business information (for API integrators): business name, business URL, contact email, payout bank details, and description.
- Communications: messages you send to our support team.
2.2 Information collected automatically
- Device and log data: IP address, browser type, operating system, referring URLs, and timestamps of requests.
- Usage data: pages visited, actions taken, and features used.
- Cookies and similar technologies: used to keep you signed in, remember preferences, and analyze aggregate usage.
2.3 Information from third parties
- Busha: KYC results, transaction status, and settlement confirmations.
- Payment partners and banks: confirmation of transfers and account verification results.
- Analytics providers: aggregate usage statistics (e.g. Google Analytics).
3. How we use your information
- To create and operate your account.
- To perform identity verification as required by Nigerian law.
- To execute buy, sell, checkout, and payout transactions through Busha.
- To detect, prevent, and respond to fraud, abuse, and security incidents.
- To comply with our legal, regulatory, and tax obligations.
- To communicate with you about your account, transactions, and product updates.
- To improve the Services and develop new features.
4. Legal basis for processing
We process your personal data on the following legal bases:
- Contract: to provide the Services you have requested.
- Legal obligation: to comply with Nigerian AML, KYC, and financial regulations.
- Legitimate interest: to prevent fraud, secure the Services, and improve our products.
- Consent: where you have explicitly agreed (e.g. optional marketing communications).
5. Sharing your information
We share personal data only with:
- Busha — our licensed digital asset partner, for KYC, transaction execution, and settlement.
- Banks and payment processors — to settle fiat transfers to your verified account.
- Cloud infrastructure and service providers — who host our systems under data processing agreements.
- Analytics providers — on an aggregated, non-identifying basis where possible.
- Regulators and law enforcement — where required by valid legal process or Nigerian law.
- Successors — in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections.
We do not sell your personal data.
6. International transfers
Some of our service providers (including Busha and cloud providers) may process data outside Nigeria. Where this happens, we ensure appropriate safeguards are in place consistent with the Nigeria Data Protection Act 2023 (NDPA).
7. Data retention
We retain account and transaction data for as long as your account is active and for a minimum of five (5) years after closure, as required by Nigerian AML and financial regulations. Other data is deleted or anonymized when no longer needed.
8. Security
We use industry-standard security measures including encryption in transit (TLS), hashed passwords, access controls, and rate-limited APIs. Because KryptWave is non-custodial, we do not store your crypto private keys or hold your crypto. However, no system is perfectly secure, and you use the Services at your own risk.
9. Your rights
Under the NDPA, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of data we are not legally required to retain.
- Object to certain processing (e.g. marketing).
- Request a portable copy of your data.
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
To exercise any of these rights, email kryptwave@outlook.com.
10. Children
The Services are not intended for anyone under 18. We do not knowingly collect data from minors. If we learn that we have, we will delete it.
11. Cookies
We use essential cookies to keep you signed in and to secure the Services. We also use limited analytics cookies to understand aggregate usage. You can control cookies through your browser settings, but disabling essential cookies will break account functionality.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Services. The "Last updated" date at the top reflects the current version.
13. Contact
Questions about this Privacy Policy or your data? Email kryptwave@outlook.com or write to:
SociapexPro Ltd
Attention: Data Protection Officer
Abuja, Nigeria