Privacy Policy

1. Who this policy covers

Bryansub is responsible for deciding how personal information is used for the purposes described here. This Policy applies to visitors, account holders, recipients whose details are supplied for a purchase, and people who contact us. It does not replace the privacy notice of your bank, network, biller, Google or WhatsApp.

The current frontend stores preview account and transaction information in your browser. Live payment, email delivery and identity verification are not connected simply because a corresponding screen is visible. Real card details, NINs and BVNs should not be entered into a feature labelled as a preview.

2. Information associated with your account

Depending on the features you use, account information includes your username, email address, phone number, optional profile image, setup status and preferences. Verification results may include a full name, verification method, outcome and reference.

Transaction information includes the service, provider, plan, amount, date, reference, status and recipient identifier. A recipient identifier may be a phone number, smartcard number, meter number or internet account number. Beneficiary information is used to make a later purchase easier.

Support information may include your enquiry, transaction reference, attachments and follow-up correspondence. Do not send a password, transaction PIN, OTP or complete bank-card credentials in a support message. Only provide recipient details when you have a lawful reason to do so.

3. Technical information and browser storage

Hosting and delivery infrastructure may process IP addresses, browser information, request times and error records to serve and protect the website. We do not describe these records as anonymous when they can identify a person or device.

The website uses browser local storage for account/profile information, sample wallet and transaction records, saved beneficiaries, notification state and theme preferences. Session storage supports temporary signup challenges and email previews. In the current preview, profile photos selected by you are also stored with your profile in that browser.

You can clear this data in your browser’s site settings. This may reset the preview account and saved preferences. A service worker may cache interface files to help the website load; clearing site storage removes those cached copies too.

4. Why information is used

We use the minimum information needed for the feature you request. In a live service, this includes verifying an account email, maintaining access, processing an authorised payment, submitting recipient details to a provider, presenting a receipt and investigating a disputed transaction.

Information may also be used to prevent abuse, protect accounts, reconcile payments, answer support enquiries, comply with applicable recordkeeping duties and improve reliability. Marketing is a separate purpose; an account-security notice or payment receipt is not treated as permission to send unrelated promotions.

5. Lawful grounds for processing

For live account and purchase services, processing necessary to carry out your request is based on the relevant contractual relationship. Where a legal duty applies, processing necessary to meet that duty relies on that obligation.

Security and service reliability may rely on a legitimate interest, assessed against the effect on your privacy and your available rights. Where consent is required, including for optional marketing or non-essential tracking, it must be obtained separately and can be withdrawn. We do not rely on a blanket consent statement for every use of personal information.

6. NIN, BVN and payment information

Identity verification, when enabled, is performed through a verification connection disclosed for that service. A verification request may require a NIN or BVN and information needed to match the identity. The resulting legal name may be displayed as read-only on your profile.

The current verification preview accepts sample identifiers and does not verify a real identity. It does not save the entered identifier in the account record; it saves the sample result and name. A preview verification badge must not be interpreted as a completed real-world KYC check.

Where a live payment processor handles card authentication or bank payment details, its own privacy notice also applies. Do not put complete card credentials or bank-login information into a Bryansub support form.

7. When information is shared

To fulfil a live order, information necessary for delivery may be shared with the selected network, utility, television service, examination provider, internet provider or service aggregator. A payment processor or bank may receive the information necessary to process, reconcile or investigate a payment.

Hosting, email-delivery, security, identity-verification and support providers may process information for an enabled feature under appropriate instructions and safeguards. We do not sell customer personal information. A provider acting for its own purposes, such as a bank or network, may be independently responsible for its processing.

We may disclose information where lawfully required by a competent authority or reasonably necessary to investigate fraud, enforce a legal right or protect people from harm. We assess the request and disclose only information appropriate to its lawful purpose.

8. International processing

Hosting or other service providers may process information outside Nigeria. Where a transfer is subject to Nigerian data-protection requirements, appropriate safeguards or another legally available transfer condition must apply. We do not treat use of a foreign service as permission to disregard those requirements.

9. How long information is kept

Browser-only preview data remains on your device until you clear it, sign out where the feature removes it, or a session expires. Clearing a browser does not delete any separate records a live bank or provider is required to keep.

For live operations, account information is kept while necessary to operate and support the account. Transaction and dispute records may need to remain after closure to meet legal, accounting, fraud-prevention or claims requirements. Support material is retained only as needed to handle the enquiry and related legitimate recordkeeping.

Marketing preferences must be respected after withdrawal; a minimal suppression record may be retained to prevent further unwanted messages. Information is deleted or appropriately de-identified when its purpose and any applicable retention obligation end.

10. Protecting information

Access to personal information should be limited to the people and providers who need it for an authorised purpose. We assess safeguards appropriate to the information and service, including secure transport, access restrictions and investigation of security incidents. No website or device can be guaranteed free of risk.

Do not use a shared device without considering what your browser stores. Keep your device and email account secure. A PIN screen or verification badge in the current frontend is not a substitute for server-side protection of a live payment service. Where a reportable incident affects personal information, applicable notification requirements will be followed.

11. Your rights and requests

Subject to the conditions in the Nigeria Data Protection Act 2023, you may request access to personal information, correction of inaccuracies, deletion or restriction where applicable, and portability where available. You may object to relevant processing and withdraw consent without affecting processing that was lawful before withdrawal.

You can edit ordinary account information in Edit profile. A verified legal name may need a supporting identity check to correct it. To raise a privacy request, use the contact options published on the Contact page and identify the request as a privacy matter. We may need proportionate information to verify that a request concerns you.

Some requests may be limited by a legal retention duty or the rights of another person. We will explain an applicable restriction rather than treating every request as an automatic refusal. You may also lodge a complaint with the Nigeria Data Protection Commission through its official channels.

12. Messages, marketing and external services

Account access, OTPs, payment receipts and important service or security notices are used to operate the service. Optional promotional messages should have an available opt-out. Withdrawing from marketing does not stop essential notices about an account or transaction.

Opening a WhatsApp link takes you to WhatsApp; its privacy practices then apply to that interaction. Google authentication, when enabled, must explain the information requested from Google. The present Google preview does not obtain credentials from your Google account.

No advertising or analytics consent is implied merely by opening the website. If non-essential trackers are introduced, the relevant notice and controls must be provided before they are used where consent is required.

13. Children, changes and contact

Bryansub accounts are intended for adults. If you believe a child has provided personal information through an enabled service, contact us so the issue can be assessed.

We will update this Policy when relevant processing changes and provide additional notice where required. For questions or requests, use the Contact page or the support options published by Bryansub. The date above identifies the current version.