Privacy Policy

BetaRoute AI Technologies Limited ("Company", "we", "us", or "our") operates BetaPayAI ("BetaPayAI"), an AI-powered conversational payments platform for wallet funding and purchases of airtime, mobile data, utility bills, cable TV, betting top-ups, and examination pins in Nigeria.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you interact with us via WhatsApp, Telegram, betapayai.com, email, and related channels.

This Policy applies to end users of BetaPayAI. It does not cover third-party websites, betting operators, or messaging platforms themselves — those are governed by their own policies.

By using the Service, you acknowledge this Policy. If you do not agree, do not use the Service.

Data controller: BetaRoute AI Technologies Limited, UCH, Ibadan, Nigeria.

Privacy inquiries & data subject requests: privacy@betapayai.com

General support: support@betapayai.com

We aim to respond to verified privacy requests within thirty (30) days, subject to legal extensions where permitted.

Identity & contact: WhatsApp phone number (primary identifier), optional Telegram identifier, display name, recovery email address, and email verification status.

Authentication & security: transaction PIN (never stored in readable form), email verification codes, account pause/freeze status, and channel-linking events.

Wallet & payments: wallet balance, transaction history (amounts, fees, categories, statuses, references), payment references, funding receipts, and refund records. Card payments are processed by our payment partners; we do not store full card numbers on our systems.

Transaction & recipient details: information needed to complete your purchases, such as phone numbers, meter numbers, smartcard/IUC numbers, betting account identifiers, and examination types.

Communications: messages you send to our bot, bot responses, support correspondence, and email communication.

Fraud & security signals: information needed to detect and investigate suspicious or abusive activity.

Technical data: IP addresses where collected for security purposes, message timestamps, channel type, and basic device or browser information where applicable.

We do not intentionally collect special categories of personal data (such as health, biometric, or political opinions). Do not send such information in chat.

Directly from you when you message us, fund your wallet, set a PIN, verify email, pause your account, link Telegram, or contact support.

Automatically when you use the Service — for example, transaction records and security events.

From payment and messaging partners as necessary to operate the Service.

From bill-payment and VTU partners to confirm delivery status.

We process personal data under the Nigeria Data Protection Act 2023 (NDPA) and applicable regulations on the following bases:

Contract performance: to register your account, fund your wallet, execute purchases you authorize, send receipts, and provide customer support.

Legitimate interests: to secure the Platform, prevent fraud and abuse, maintain service quality, enforce our Terms, and defend legal claims — balanced against your rights.

Legal obligation: to meet AML/CTF, tax, accounting, regulatory, and law-enforcement requirements.

Consent: where required for optional marketing or processing beyond the above (you may withdraw consent without affecting core service delivery where withdrawal is permitted by law).

We use artificial intelligence and automated systems to interpret payment requests, answer common questions, and help detect suspicious or abusive activity.

Automated decisions may affect your account where necessary to protect the Service and other users.

You have the right to request information about automated decisions that significantly affect you, and to contest such decisions, subject to NDPA and applicable exceptions.

We share the minimum data necessary with:

Payment processors to handle wallet funding and verify payments.

Messaging platforms (WhatsApp and Telegram) to deliver the chat service.

Email providers to send OTPs, security links, receipts, and notifications.

Technology and AI service providers that help us operate and secure the Platform.

VTU and bill-payment partners, and downstream networks, DISCOs, cable operators, betting operators, and examination boards — to fulfill purchases you authorize.

Professional advisers, auditors, and insurers under confidentiality obligations.

Law enforcement, regulators, or courts when required by law or to protect rights, safety, and integrity.

Successors in a merger, acquisition, or asset transfer, subject to equivalent protections.

We do not sell your personal data.

Your data is primarily processed in Nigeria. Some of our service providers may process data in other countries.

Where personal data is transferred outside Nigeria, we implement appropriate safeguards consistent with the NDPA.

We retain personal data only as long as necessary for the purposes described in this Policy:

Wallet and transaction records: for as long as required for financial, tax, AML, or regulatory compliance. When an account is deleted, these records are kept anonymised, no longer linked to your name or contact details.

Identity records of a deleted account (name, email, phone number and linked bank accounts): kept encrypted and access-restricted for five (5) years after the account is deleted, as anti-money-laundering law requires, and opened only to meet a legal or regulatory request. They are then deleted.

Chat and support records: for a limited period for operations, support, and fraud prevention, unless a longer period is needed for investigations, disputes, or legal claims. Chat history is deleted when your account is deleted.

Security records: for the duration of the account relationship and a reasonable period thereafter.

Marketing preferences: until you withdraw consent or unsubscribe.

When retention ends, we delete or irreversibly anonymize data where feasible.

We implement technical and organizational measures designed to protect personal data, including encryption in transit, access controls, secure storage of credentials, monitoring, and fraud prevention measures.

No security measure is perfect. You must protect your WhatsApp/Telegram account, email inbox, device, and PIN.

Subject to NDPA and applicable exceptions, you may have the right to:

Access personal data we hold about you.

Request correction of inaccurate or incomplete data.

Request deletion or anonymization where processing is no longer necessary or consent is withdrawn (subject to legal retention requirements). You can request account deletion in the app (Settings → Profile → Delete account) or via WhatsApp or Telegram by messaging "delete my account". Your wallet must hold less than ₦1 when you ask, because wallet funds cannot be paid out; any kobo left is cleared when the account is deleted. Your account is paused straight away and deleted automatically after 180 days, and you may cancel at any time before then. Transaction and financial records, and a restricted copy of your identity, are retained as described in Section 9.

Object to or restrict certain processing based on legitimate interests.

Data portability for data you provided, in a structured, commonly used format where technically feasible.

Withdraw consent at any time for consent-based processing.

Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise rights, email privacy@betapayai.com from your registered recovery email or verify identity via WhatsApp from your registered number. We may refuse requests that are manifestly unfounded, excessive, or would compromise others' privacy or security.

When you use BetaPayAI on WhatsApp or Telegram, those platforms receive your messages and metadata under their own terms and privacy policies.

Payment partners process funding transactions under their own policies when you pay through checkout.

We are not responsible for independent processing by third-party platforms or partners. We encourage you to review their policies directly.

betapayai.com uses essential technologies to operate (e.g., security pages and funding callbacks). We may load fonts from third-party services, which may involve your browser connecting to external servers.

We do not currently use advertising cookies or third-party web analytics trackers on our marketing site. If we introduce analytics or marketing cookies in future, we will update this Policy and, where required, obtain consent.

Authorized employees and contractors access personal data on a need-to-know basis for support, fraud investigation, engineering, and compliance. Internal access is restricted and subject to confidentiality obligations and security policies.

BetaPayAI is not directed to anyone under eighteen (18). We do not knowingly collect personal data from minors. If you believe a minor has provided data, contact privacy@betapayai.com and we will take appropriate steps to delete or restrict the account.

We may send service-related messages (transaction receipts, security alerts, OTPs, policy updates) without separate marketing consent because they are necessary for the Service.

Promotional messages, if sent, will comply with applicable consent requirements. You may opt out of non-essential marketing via instructions in the message or by contacting support.

We may update this Privacy Policy from time to time. The effective date at the top will change when we do. Material changes will be posted at betapayai.com/privacy and, where appropriate, communicated through the Service.

Continued use after updates constitutes acknowledgment where permitted by law.

BetaRoute AI Technologies Limited

UCH, Ibadan, Nigeria

Privacy: privacy@betapayai.com

Support: support@betapayai.com

Website: https://betapayai.com