Privacy Policy

Safepay is a WhatsApp-native escrow service operated by Hidenor and Hedge Financial Services Limited ("Hidenor and Hedge", "we", "us", or "our"), a company registered in Nigeria and operating under the laws of the Federal Republic of Nigeria.

Safepay enables buyers and sellers to complete trades safely on WhatsApp by holding payment in escrow until delivery is confirmed by both parties.

Contact us at: contact@safepay.services
Website: safepay.services

When you use Safepay we collect the following information:

Information you provide directly:

• Your WhatsApp phone number
• Your WhatsApp display name
• Deal details you describe: item name, price, deadline, deliverables
• Bank account number and bank name (sellers only)
• Voice notes you send to the bot (transcribed and stored as text)
• Photos you send as deal proof or delivery proof
• Dispute statements and evidence you submit
• Any username you set using the #username command

Information collected automatically:

• Message timestamps
• Business-scoped user ID (BSUID) provided by Meta's WhatsApp platform
• Deal status history and transaction timestamps
• Trust Score data: completed deals, on-time delivery rate, dispute history
• Response times between messages in the context of a deal

Information from third parties:

• Bank account name verification from our payment partner (used to confirm seller identity at deal creation)
• Payment confirmation data from our payment processor when a buyer pays

We use the information we collect to:

• Create and manage escrow deals between buyers and sellers
• Verify seller bank account details before payment is released
• Process payments and disburse funds to sellers upon deal completion
• Calculate and display Trust Scores to help users assess counterparties
• Resolve disputes, including reviewing conversation history, deal photos, delivery photos, and statements from both parties
• Send deal status notifications, reminders, and confirmations via WhatsApp
• Detect and prevent fraud, bad faith dealing, and abuse of the platform
• Comply with legal obligations under Nigerian law
• Improve our service based on aggregate usage patterns

Your data is stored on secure cloud servers. Deal records, profiles, and conversation history are retained for the duration of your use of Safepay and for up to 3 years after your last transaction to comply with financial record-keeping requirements under Nigerian law.

Photos sent as deal proof or delivery proof are stored for the duration of the deal and for up to 12 months after the deal is resolved, after which they are deleted.

Voice notes you send are transcribed into text to extract deal information. Only the text transcription is stored; the original audio is deleted immediately after transcription and is never retained on our servers.

We do not sell your personal information. We share your information only with:

• Payment processors: Paystack, Monnify, Anchor, or Bloc, as applicable, to process payments and verify bank account details. These processors handle your financial data under their own privacy policies and are PCI-DSS compliant.
• AI service providers: voice notes are processed by a third-party transcription service to convert them to text. Deal descriptions and conversation content are processed by a third-party AI service for deal term extraction and dispute analysis. These providers process data only as instructed by us and are bound by appropriate data processing agreements.
• Meta: all messages are transmitted through Meta's WhatsApp Business Platform. Meta's data handling is governed by their privacy and data policies.
• Dispute reviewers: members of our internal dispute resolution team may review the deal summary, deal photos, delivery photos, and dispute statements when a dispute is raised. Reviewers do not have access to phone numbers, usernames, or any personally identifying information. They see only the deal terms and evidence submitted. Reviewers are bound by confidentiality obligations.
• Law enforcement or regulators, when required by applicable Nigerian law, court order, or regulatory authority.

Under the Nigeria Data Protection Regulation (NDPR), you have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your data, subject to our legal retention obligations
• Portability: request your data in a portable format
• Objection: object to certain uses of your data
• Withdrawal of consent: stop using Safepay at any time

To exercise any of these rights contact us at contact@safepay.services. We will respond within 30 days.

Note: we cannot delete deal records that are subject to an active dispute, pending payment, or regulatory hold. Deletion requests for such records will be processed after the relevant obligation ends.

Your Safepay Trust Score, including your completed deal count, badge, and average response time, may be visible to other Safepay users when they use the #check command or view your public score page at safepay.services/score/[username].

Your phone number is never shown on your public score page. Only your username (if set), score percentage, badge, and aggregate statistics are publicly visible.

You can remove your username from your public profile at any time by contacting us at contact@safepay.services.

We implement reasonable technical and organisational measures to protect your personal data, including:

• HTTPS encryption for all data in transit
• Webhook signature verification for all payment processor callbacks
• Password-protected admin access with brute-force protection
• Rate limiting on API endpoints to prevent abuse
• Access controls limiting which team members can view financial data

No system is completely secure. If you believe your data has been compromised please contact us immediately at contact@safepay.services.

Safepay is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has used Safepay please contact us and we will delete the relevant data.

Your data may be processed outside Nigeria, including in the United States where our hosting provider, payment processors, and AI service providers operate. We ensure appropriate safeguards are in place for such transfers consistent with applicable law.

Safepay operates primarily through WhatsApp and does not use cookies or tracking technologies on the WhatsApp interface.

Our website (safepay.services) may use minimal cookies for functionality. We do not use advertising cookies or share your browsing data with advertisers.

We may update this privacy policy from time to time. When we make material changes we will notify active users via WhatsApp at least 30 days before the changes take effect.

The effective date at the top of this page reflects the date of the most recent update. Continued use of Safepay after the effective date constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or complaints:

• Email: contact@safepay.services
• Website: safepay.services
• Operator: Hidenor and Hedge Financial Services Limited
• Jurisdiction: Nigeria

If you are not satisfied with our response you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).