Ratefy Technology Limited ("Ratefy", "we", "us", or "our") is responsible for the personal information described in this policy. We are registered in Nigeria and operate from 63 Ogunlana Drive, Surulere, Lagos, Nigeria.

This policy explains how we handle personal information when you use Ratefy. It should be read with our Terms of Service and Cookie Policy.

1. Scope

This policy applies to our website, application, wallets, Marketplace, OTC Deals, Coin to Cash, Procure, Topup, verification, support, notifications, and related services. It also applies when you communicate or transact with us or another Ratefy user.

2. Information we collect

Depending on how you use Ratefy, we may collect:

Account information: Your name, username, date of birth, contact details, address, profile information, preferences, and account records.
Identity and compliance information: Information and documents needed to verify your identity, eligibility, and source of funds. This may include BVN, identity documents, proof of address, photographs, verification results, and other information required by law or for a particular service. NIN may be requested later if additional verification is needed.
Financial and transaction information: Bank and wallet details, payment information, transaction amounts, currencies, fees, rates, beneficiaries, transaction history, and supporting evidence.
Service information: Offers, orders, transaction messages, ratings, dispute records, delivery information, and other details needed to provide the service you request.
Communications: Support messages, complaints, feedback, notification preferences, and correspondence with us.
Device and usage information: IP address, device and browser details, login activity, cookies, pages used, error reports, and security events.

We collect information directly from you, from people you transact with, from service providers, automatically through your device, and from public or legally permitted sources.

3. How we use information

We use personal information to:

Create, operate, authenticate, and secure your account.
Verify identity and eligibility, meet legal obligations, and prevent fraud or misuse.
Provide wallets, payments, trading, conversion, procurement, Topup, support, and related services.
Process and keep records of transactions, complaints, and disputes.
Send transaction confirmations, service updates, security alerts, and permitted marketing messages.
Improve Ratefy and establish, exercise, or defend legal claims.

We may use automated checks to support verification, security, fraud prevention, and service decisions. Where required by law, you may request human review of a decision that significantly affects you.

4. Legal bases

Under the Nigeria Data Protection Act 2023, we process information where:

It is needed to provide a service or perform a contract with you.
It is needed to meet a legal or regulatory obligation.
It supports our legitimate interests, such as security, fraud prevention, service improvement, and dispute resolution, without overriding your rights.
You have given consent, which you may withdraw without affecting earlier lawful processing.
Another lawful basis, including vital or public interest, applies.

We may share information where reasonably necessary with:

Banking, payment, wallet, stablecoin, identity verification, logistics, and other partners that help provide the Services, including Anchor, Quidax, Bridge, and Dojah.
Transaction counterparties, where limited information is needed to complete a transaction or resolve a dispute.
Providers of hosting, security, analytics, communications, customer support, and professional services.
Regulators, courts, law enforcement, tax authorities, or other recipients where required by law or needed to protect users, funds, or rights.
A buyer, successor, investor, or adviser involved in a business transfer, subject to appropriate safeguards.

We do not sell personal information or share it for another party's independent direct marketing.

6. International transfers

Some providers or transaction counterparties may process information outside Nigeria. Where information is transferred internationally, we use appropriate contractual, organisational, and technical safeguards required by applicable law.

7. Data retention

We keep information for as long as needed to provide the Services and meet compliance, accounting, tax, fraud prevention, dispute, and legal requirements. Some records may remain after account closure where required or permitted by law. When information is no longer needed, we delete or anonymise it.

8. Data security

We use reasonable organisational and technical safeguards designed to protect personal information. Access to sensitive information is limited to authorised people and providers who need it for an approved purpose. No storage or transmission method is completely secure, so you should protect your credentials and tell us promptly if you suspect unauthorised access.

9. Your rights

Subject to applicable law, you may have the right to:

Ask whether and how we process your information.
Request access, correction, deletion, restriction, or a portable copy.
Object to certain processing or direct marketing.
Withdraw consent where processing depends on consent.
Request human review of a significant automated decision.
Complain to the Nigeria Data Protection Commission.

Email chat@ratefy.co to exercise a right. We may verify your identity before responding. A request may be limited where the law requires us to retain information, protect another person, prevent fraud, preserve evidence, or complete an unresolved transaction.

10. Cookies

With your advertising-measurement permission, Google Ads receives browser and device information, page visits, ad-click identifiers, and a verified email-signup event to measure and improve Ratefy advertising. We do not send your email address, phone number, or financial details through this measurement. Signups are not payments or completed trades. Google may process this information outside Nigeria. Read Google's privacy information.

Advertising measurement is off until you explicitly accept it. Previous cookie acceptance does not grant this new permission. Your timestamped choice and the notice version are saved on this device, including earlier choices when you withdraw. You can reject or withdraw advertising measurement at any time through Cookie settings. Global Privacy Control overrides acceptance. Events blocked by your choice are not replayed if you accept later.

We use cookies and similar technologies to keep you signed in, remember preferences, secure Ratefy, and understand service performance. See our Cookie Policy and cookie preference controls for details.

11. Children

Ratefy is not intended for anyone under 18. If you believe a child has provided personal information, contact us so we can take appropriate action.

12. Third-party services

Services controlled by another organisation may have their own privacy practices. Please read their notices before providing information directly to them.

13. Changes

We may update this policy when our Services or legal obligations change. We will post the revised policy with a new date and provide additional notice where appropriate.

14. Contact us

Ratefy Technology Limited
63 Ogunlana Drive, Surulere, Lagos, Nigeria
Email: chat@ratefy.co