Privacy Policy

1. Introduction

Mabro ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and mobile application (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Personal Identification Information:

• Full name
• Phone number
• Email address
• Bank Verification Number (BVN) — used solely for KYC verification
• National Identification Number (NIN) — used solely for KYC verification
• Bank account details (for withdrawals)
• Residential address (for Tier 3 upgrade)
• Government-issued ID documents (for address verification)

Usage Data:

• Transaction history (airtime purchases, bill payments, withdrawals)
• Device information (device model, operating system, app version)
• Push notification tokens (for sending alerts)
• IP address and browser information
• Usage patterns and feature interactions

3. How We Use Your Information

• To provide and maintain the Service: Process transactions, manage your account, and enable platform features.
• KYC Verification: Verify your identity through NIN and BVN checks as required by Nigerian financial regulations.
• Transaction Processing: Debit your wallet, credit beneficiaries, and process withdrawals to your bank account.
• Customer Support: Respond to your inquiries, resolve disputes, and provide technical assistance.
• Fraud Prevention: Detect and prevent fraudulent or unauthorized transactions.
• Service Improvement: Analyze usage patterns to improve our platform and user experience.
• Communications: Send transaction receipts, service updates, and promotional messages (with your consent).
• Legal Compliance: Comply with applicable laws, regulations, and regulatory requests.

4. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who help us operate the platform — including Rubies Bank (virtual accounts), VTPass (bill payments), AutopilotNG (airtime-to-cash), and other payment processors.
• Regulatory Authorities: When required by law, court order, or government regulation, including CBN and NIMC.
• Fraud Prevention Agencies: To investigate and prevent fraudulent activities.

We do not sell your personal information to third parties. Your data is never shared for advertising or marketing purposes without explicit consent.

5. Data Security

We implement industry-standard security measures to protect your data:

• 256-bit SSL/TLS encryption for all data in transit
• Encrypted storage of sensitive data (passwords, PINs, BVN, NIN)
• PIN-based transaction authorization (bcrypt hashed)
• JWT-based session management with 7-day token expiry
• Automated fraud detection and transaction monitoring
• Regular security audits and penetration testing
• Access controls limiting internal data access to authorized personnel only

6. Data Retention

We retain your personal data only as long as necessary to:

• Provide the Service and fulfill transactions
• Comply with legal obligations (including CBN transaction record-keeping requirements)
• Resolve disputes and enforce our agreements

Transaction records are retained for a minimum of 5 years as required by Nigerian financial regulations. Upon account deletion, personal information is anonymized or deleted within 90 days, subject to legal retention requirements.

7. Your Rights

You have the right to:

• Access your personal data held by us
• Correct inaccurate or incomplete data
• Delete your account and associated data (subject to legal retention requirements)
• Restrict processing of your data
• Withdraw consent for marketing communications at any time
• Request data portability in a machine-readable format

To exercise any of these rights, contact us at support@mabro.ng. We will respond within 30 days.

8. Cookies and Tracking

We use essential cookies to maintain session state and authenticate users. We do not use tracking cookies for advertising purposes. You can control cookie preferences through your browser settings, though disabling essential cookies may affect platform functionality.

9. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will take steps to delete that information.

10. Third-Party Services

Our platform integrates with third-party services for core functionality:

• Rubies Bank: Virtual account creation and transaction processing
• VTPass: Airtime, data, and bill payment processing
• AutopilotNG: Airtime-to-cash automation
• Resend: Email delivery for OTP and notifications

Each third party has its own privacy policy governing the use of your data. We encourage you to review their policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email, in-app notification, or a prominent notice on our platform. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy:

Other services