Privacy Policy

KATSOFT LIMITED (operating as "Katpay") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment gateway services.

This Policy complies with the Nigeria Data Protection Act (NDPA) 2023, Nigeria Data Protection Regulation (NDPR) 2019, and the General Application and Implementation Directive (GAID) 2025.

2.1 Merchant Information

When you register for a Katpay account, we collect:

• Business name, CAC registration number, and registration documents
• Business address and contact information
• Director/Owner information (name, BVN, NIN, photo ID)
• Bank account details for settlements
• Email address and phone number
• Tax identification information

2.2 Customer Transaction Data

We collect information about transactions processed through Katpay:

• Customer name and contact information
• Payment method details (card numbers are tokenized)
• Transaction amount, date, and time
• IP address and device information
• Transaction status and settlement details

2.3 Technical Data

• IP addresses, browser type, and operating system
• API usage logs and integration data
• Cookies and similar tracking technologies
• Device identifiers (IMEI, MAC address for mobile apps)

We use your personal data for the following purposes:

• Payment Processing: To facilitate transactions and settlements
• KYC/AML Compliance: To verify your identity and comply with regulatory requirements
• Fraud Prevention: To detect and prevent fraudulent transactions
• Customer Support: To respond to inquiries and resolve issues
• Service Improvement: To analyze usage patterns and improve our platform
• Legal Compliance: To meet legal and regulatory obligations
• Communication: To send transaction notifications and service updates

We share your data only with:

• PalmPay Limited: Our licensed banking partner for transaction processing
• Banks and Financial Institutions: For payment processing and settlements
• Regulatory Authorities: CBN, NITDA, EFCC when required by law
• Service Providers: Cloud hosting, analytics, and security services (under strict confidentiality agreements)
• Law Enforcement: When required by court orders or legal processes

We implement industry-standard security measures:

• 256-bit SSL/TLS encryption for data transmission
• PCI-DSS Level 1 compliant infrastructure
• Data encryption at rest and in transit
• Multi-factor authentication for account access
• Regular security audits and penetration testing
• Firewalls and intrusion detection systems
• Access controls with need-to-know basis
• Staff training on data protection best practices

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Transaction Records: 10 years (as required by CBN regulations)
• KYC Documents: 10 years after account closure
• Customer Data: 7 years after last transaction
• Technical Logs: 12 months

After the retention period, personal data will be securely deleted or anonymized.

Under Nigerian data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal obligations)
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for data processing at any time

To exercise any of these rights, contact our Data Protection Officer at support@katpay.co.

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the Nigeria Data Protection Commission (NDPC) within 72 hours
• Inform affected individuals within 7 days of discovering the breach
• Provide details of the breach and remedial actions taken
• Offer appropriate support and guidance to affected individuals

We use cookies and similar technologies to:

• Maintain session security and authentication
• Remember your preferences and settings
• Analyze website traffic and user behavior
• Detect and prevent fraud

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our services.

Katpay services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we discover that we have inadvertently collected data from a minor, we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email or through a prominent notice on our website at least 30 days before the changes take effect.

Continued use of our services after the effective date constitutes acceptance of the updated Privacy Policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact:

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data protection rights have been violated.