Privacy Policy

Last updated: 24 October 2026

This policy explains what personal data EscriptPay collects, why, who we share it with and the choices you have.

1. 1. Who we are

   EscriptPay is operated by Abimbade Joseph Onaopemiposi, Ibadan, Oyo State, Nigeria. We are responsible for the personal data described here. Contact: joseescript@gmail.com.

2. 2. What we collect

   • Account details: your name, email address, phone number, state (optional) and a securely hashed password.
   • Orders: the network, plan or amount, recipient phone number, price, status and references for each purchase, and your wallet activity.
   • Messages: what you send us through the contact form.
   • Technical data: basic information needed to run and secure the service, such as your IP address for rate-limiting and logs kept by our hosting provider.

3. 3. What we don't collect

   We never receive or store your full card number, CVV, PIN or bank login. Payments are entered on Paystack's secure checkout.

4. 4. How we use it

   • To create and secure your account, including sending verification codes and password reset emails.
   • To process payments, deliver airtime and data, issue receipts and handle refunds.
   • To answer your messages and resolve issues with orders.
   • To prevent fraud and keep the service safe, and to meet legal and accounting obligations.

5. 5. Who we share it with

   We only share what each partner needs to provide its service to us:

   • Paystack — processes your payments (your email and payment amount).
   • Our airtime and data supplier — receives the recipient phone number, network and order to deliver it.
   • Hosting and database providers (Vercel, MongoDB Atlas) — store and run the service.
   • Email provider — sends verification codes and account emails.
   • Authorities, where the law requires it.

   We do not sell your personal data.

6. 6. How long we keep it

   We keep your account details while your account is open. Order and payment records are kept for as long as needed for accounting, tax, dispute and legal purposes. Verification codes and password reset links expire within an hour and are stored only in scrambled (hashed) form.

7. 7. Your rights

   Under the Nigeria Data Protection Act 2023 you can ask to see the personal data we hold about you, correct it, delete it (where we don't need to keep it by law), or object to how we use it. Email joseescript@gmail.com from the address on your account. You can also complain to the Nigeria Data Protection Commission.

8. 8. Cookies and storage

   We use one essential cookie to keep you signed in, and your browser's local storage to remember preferences such as light/dark theme and whether your balance is hidden. We don't use advertising cookies.

9. 9. Security

   Passwords are hashed, sessions use a secure httpOnly cookie, connections are encrypted (HTTPS), and payments are verified on our server before any order is processed. No system is perfectly secure, so please use a strong, unique password.