Privacy policy

01What we collect

Three kinds of data, and nothing else:

• Account data: the name, work email and phone number of the people on your team, and your business details.
• Transaction data: the destination number, network, amount, timing, the channels tried and the outcome. This is the record of the service itself.
• Technical data: IP addresses, API key identifiers, request timing and error traces, kept so we can debug and so the audit trail is real.

02Why we hold it

To run the service, to bill you correctly, to investigate disputes and fraud, and to meet our obligations under Nigerian law, including the Nigeria Data Protection Act. We do not sell it, and we do not use your transaction data to build products for anyone else.

03Who else sees it

The network operators and providers we route through see what they need to complete a transaction: the destination number, network and amount. Our infrastructure and payment providers process data on our instructions under written terms. Nobody else sees it unless a court or regulator compels us, and we will tell you when that happens unless we are barred from doing so.

04How long we keep it

Transaction and ledger records are kept for as long as financial records must be kept under Nigerian law. Account data is deleted after an account closes, once we no longer need it for those obligations. Audit trail entries are append-only and never edited.

05Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete what we are not required to keep. Write to support@simconnectng.com. You can also complain to the Nigeria Data Protection Commission.

06Security

Secrets are encrypted at rest, API keys are shown once and can be rotated with an overlap window, and every action against an account is written to an append-only audit trail. Report anything that looks wrong to security@simconnectng.com.