Privacy Policy

What we collect

• WhatsApp phone number— used to identify your account and send you transaction updates.
• Transaction history— records of payments you make (service type, amount, date, reference numbers) so you can view receipts and we can resolve disputes.
• WhatsApp display name— shown in your receipts and used for personalisation.

We do not collect your location, contacts, photos, or any data beyond what is listed above.

How we use your data

• Process your bill payments and deliver receipts.
• Send transaction confirmations and failure alerts via WhatsApp.
• Investigate and resolve payment disputes or errors.
• Improve the service (aggregated, anonymised usage patterns).

Payment processing

We use Paystack to process card and bank payments. Your card details are handled entirely by Paystack — we never see or store your full card number, CVV, or bank login credentials. Paystack is PCI-DSS compliant and licensed by the Central Bank of Nigeria.

We do not sell your data

Your personal information is never sold, rented, or traded to third parties for marketing purposes. We only share data when:

• It is necessary to complete your payment (e.g. passing your meter number to an electricity provider).
• Required by Nigerian law or a valid court order.

Storage & security

Your data is stored on encrypted servers. We use industry-standard security measures including HTTPS encryption, database-level access controls, and regular security reviews. While no system is 100% secure, we work hard to protect what you entrust to us.

Data retention

We keep your transaction history for as long as your account is active, plus an additional period as required by Nigerian financial regulations. If you ask us to delete your account, we will remove your personal data within 30 days, except where retention is legally required.

Your rights

Under the Nigeria Data Protection Regulation (NDPR), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal obligations).
• Withdraw consent at any time by stopping use of the service.

To exercise any of these rights, message us on WhatsApp (see below).

NDPR compliance

Throwda operates in compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023. We process your data lawfully, fairly, and only for the specific purposes described in this policy.

Changes to this policy

We may update this policy from time to time. When we do, we will update the “last updated” date at the top. Continued use of Throwda after changes means you accept the updated policy.

Contact us

Questions or concerns about your privacy? Reach us through our WhatsApp bot at throwda.com.