Legal Document

Privacy Policy

Last updated: 15 March 2026 · OH Mobility Solution Limited t/a Keepaza

1Who We Are

Keepaza is operated by OH Mobility Solution Limited, a company incorporated under the laws of Nigeria. We operate keepaza.com and all associated subdomains and applications (collectively, the “Platform”).

We take your privacy seriously. This Privacy Policy explains clearly and transparently what personal information we collect, why we collect it, how we use it, and what rights you have over it.

We do not sell your personal data to third parties for advertising purposes. Any data sharing is strictly for the purpose of providing you with our services.

2Information We Collect

We collect different types of information depending on how you use the Platform:

Information you provide directly:

Full name and email address or phone number (during registration)
Profile photo (optional)
Nigerian bank account name, number, and bank name
Cryptocurrency wallet addresses across supported networks
Invoice content — descriptions, amounts, client names, due dates
Payment receipts and proof of payment documents you upload
Any correspondence you send to our support team

Information collected automatically:

IP address and approximate geolocation
Device type, browser, and operating system
Pages visited, time spent on Platform, and navigation patterns
Invoice link views — when your invoice link is opened by a recipient
Referral source — how you found Keepaza
Error logs and performance data

Information from third parties:

Bank account verification results from payment infrastructure providers (e.g. Paystack)
Identity verification results where applicable
Information from crypto swap partners when you use swap features

3How We Use Your Data

Purpose	Data Used
Creating and managing your account	Name, email/phone, password
Displaying your payment profile to visitors	Name, photo, bank details, wallet addresses
Generating and managing invoices	Invoice content, client data, amounts
Sending invoice view and payment notifications	Email/phone, invoice data
Verifying bank account accuracy	Account number, bank name
Providing customer support	Account data, correspondence
Improving Platform performance	Usage data, error logs
Fraud prevention and security	IP address, device data, usage patterns
Generating anonymised market insights	Aggregated, non-identifiable usage data
Complying with legal obligations	Identity data, transaction records

4Legal Basis for Processing

We process your personal data on the following legal bases:

Contract performance: Processing necessary to provide the services you have signed up for
Legitimate interests: Fraud prevention, platform security, and improving our services
Legal obligation: Compliance with Nigerian law, including the Nigeria Data Protection Act 2023 (NDPA)
Consent: Where we rely on your consent (e.g. marketing communications), you may withdraw it at any time

5Data Sharing

We do not sell your personal data. We share data only in the following circumstances:

Public profile: Your username, display name, profile photo, and payment details you choose to display are visible to anyone who visits your Keepaza profile link
Service providers: We share data with trusted third parties who help us operate the Platform — including cloud hosting, email/SMS notification services, and payment verification providers — under strict data processing agreements
Crypto swap partners: When you use swap features, relevant transaction data is shared with the swap provider to execute the transaction
Affiliate and referral partners: Where you access a third-party service via a Keepaza affiliate link, we share a unique referral identifier only; we do not share your personal details with advertisers
Legal compliance: We may disclose data to law enforcement, regulators, or courts when required to do so by Nigerian law or a valid legal order
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections

6Crypto & Wallet Data

Cryptocurrency wallet addresses you link to your Keepaza profile are stored on our servers and displayed publicly on your profile page. Please be aware that:

Blockchain transactions are permanently public and irreversible by nature
Once a wallet address is published on a public profile, Keepaza cannot remove its historical visibility from blockchain explorers
We store wallet addresses solely to provide the username resolution service and do not use wallet addresses for any other commercial purpose
We do not have access to your private keys and cannot execute transactions on your behalf

7Invoice & Payment Data

Invoice data — including client names, descriptions, amounts, and due dates — is stored on our servers to provide the invoice management service. Additionally:

Anyone with a valid invoice link can view the invoice contents, including your display name and bank or wallet details
Payment receipts uploaded by invoice recipients are stored on our servers and visible to the invoice creator
Invoice data is retained for a minimum of 7 years for record-keeping purposes in compliance with Nigerian business law
You may export your invoice history at any time from your account dashboard

8Cookies & Tracking

We use cookies and similar technologies to:

Maintain your login session and authentication state
Remember your preferences and settings
Understand how users navigate and use the Platform
Track performance and detect errors

We do not use third-party advertising cookies or sell cookie data to advertisers. You may manage cookie preferences through your browser settings; however, disabling essential cookies may affect Platform functionality.

9Aggregate Data & Analytics

We may analyse aggregated, anonymised usage data derived from Platform activity for the purpose of generating market intelligence, improving our services, and sharing insights with third parties such as research institutions, financial services companies, and investors.

Aggregate data is strictly anonymised. No individual user is identifiable in any report or dataset shared with third parties. We never sell individual user data.

Examples of aggregate insights include: peak transaction hours, most active geographic regions, average invoice amounts by service category, and platform growth trends.

10Data Retention

We retain your personal data for as long as your account is active or as necessary to provide our services. Specific retention periods:

Account data: Retained for the duration of your account plus 2 years after deletion request
Invoice and financial records: Minimum 7 years from creation, as required by Nigerian law
Payment receipts: 3 years from upload date
Usage and analytics data: Up to 2 years in identifiable form; indefinitely in anonymised form
Support correspondence: 3 years from last interaction

11Data Security

We implement industry-standard security measures to protect your data, including:

Encryption of data in transit using TLS/HTTPS
Encryption of sensitive data at rest
Access controls limiting employee access to personal data on a need-to-know basis
Regular security assessments and vulnerability monitoring
Secure cloud infrastructure hosted by reputable providers

However, no security system is impenetrable. In the event of a data breach that affects your rights or freedoms, we will notify you and the relevant Nigerian Data Protection Commission (NDPC) authority within 72 hours of discovery, as required by the NDPA 2023.

You are responsible for maintaining the confidentiality of your account credentials. We will never ask you for your password by email, SMS, or phone call.

12International Data Transfers

Keepaza operates primarily within Nigeria. However, our cloud infrastructure and some service providers may store or process data outside Nigeria. Where international transfers occur, we ensure appropriate safeguards are in place including data processing agreements that meet NDPA 2023 requirements for cross-border data transfers.

13Your Rights

Under the Nigeria Data Protection Act 2023, you have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you
Right to rectification: Request correction of inaccurate or incomplete data
Right to erasure: Request deletion of your personal data, subject to legal retention obligations
Right to data portability: Request your data in a machine-readable format
Right to object: Object to processing based on legitimate interests
Right to restrict processing: Request restriction of processing in certain circumstances
Right to withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at info@keepaza.com. We will respond within 30 days. You also have the right to lodge a complaint with the Nigerian Data Protection Commission (NDPC).

14Children's Privacy

The Platform is not directed at or intended for use by children under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor, we will delete it immediately. If you believe a minor has registered on our Platform, please contact us at info@keepaza.com.

15Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or a prominent Platform notice, and update the “Last Updated” date. Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

16Contact Us

For any privacy-related questions, requests, or complaints:

Data Controller: OH Mobility Solution Limited (t/a Keepaza)
Email: info@keepaza.com
Website: keepaza.com