Privacy Policy

1. Introduction

CROWSSTACK LIMITED ("VintPay," "we," "us," or "our") operates the VintPay platform, a WhatsApp-based payment infrastructure that enables users in Nigeria to send and receive money. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services through WhatsApp and our web platform.

2. Information We Collect

3. How We Use Your Information

• To process and complete payment transactions
• To send transactional notifications via WhatsApp (payment confirmations, updates)
• To provide customer support and respond to inquiries
• To detect and prevent fraud, unauthorized access, and other illegal activities
• To comply with legal obligations and regulatory requirements
• To improve our services and user experience

4. WhatsApp Communications

We use the WhatsApp Business Platform to send transactional messages related to your payments and account activity. These messages are sent only to users who have initiated contact or opted in to receive notifications. We do not send marketing messages via WhatsApp. You can opt out of transactional notifications by contacting our support team, though this may limit your ability to receive important transaction updates.

5. Data Sharing

We do not sell your personal information. We may share your information with:

• WhatsApp/Meta Platforms — to deliver messages through the WhatsApp Business API
• Payment processors — to facilitate transactions (as required by your chosen payment method)
• Legal authorities — when required by law, court order, or regulatory obligation
• Service providers — who assist in operating our platform (under strict data protection agreements)

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Transaction records are retained for a minimum of 5 years to comply with Nigerian financial regulations. When data is no longer needed, it is securely deleted or anonymized.

7. Data Security

We implement industry-standard security measures including encryption (TLS/SSL), access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security of your data.

8. Your Rights

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to processing of your personal data
• Request data portability

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us