Privacy Policy

This Privacy Policy explains how DataGPTE (“we”, “us”, “our”) handles personal information when you use our mobile app, web agent at app.datagpte.com, marketing site at datagpte.com, and related APIs. DataGPTE is an AI assistant that helps you buy Nigerian mobile data and airtime through a wallet-funded account.

Contact for privacy requests: [email protected].

1. Information we collect

• Account details — name, email, phone number (E.164), gender (optional), password hash, and transaction PIN hash. Passwords and PINs are stored with argon2id; we never send them to AI providers.
• Identity / funding details (when you enable bank funding) — information needed to create a virtual account with our payment provider (for example BVN, date of birth, and address where required by the provider). These fields are not returned to the app UI after submission.
• Wallet and purchase history — wallet balances (in kobo), ledger entries, purchase intents, transaction status, recipient phone numbers, networks, plan names, and amounts.
• Conversations — chat text, voice transcripts, and structured UI cards generated while you use the assistant.
• Voice / microphone — when you use voice features, audio is captured on your device and sent to our backend for speech-to-text so we can understand your request. We do not use microphone audio for advertising.
• Device and push tokens — platform, optional device name, and push notification tokens so we can deliver purchase and account alerts.
• Technical logs — IP address, user agent, request identifiers, and security events (for example rate limits and audit actions) needed to operate and protect the service.
• Biometrics — Face ID / fingerprint confirmation, when enabled, runs locally on your device via the OS. Biometric templates are not sent to DataGPTE servers. An optional encrypted PIN vault may be stored in the device secure store only to unlock purchase confirmation after a successful local biometric check.

2. How we use information

• Create and secure your account, sessions, and transaction PIN.
• Fund your wallet, process data/airtime purchases, and show history.
• Power the AI assistant (understanding requests, recommending plans, confirming buys).
• Send transactional notifications (purchase success/failure, account notices).
• Prevent fraud, enforce rate limits, debug incidents, and meet legal obligations.
• Respond to support requests you send to us.

The AI model cannot complete a purchase by itself. Purchases require a backend-created purchase intent, your explicit confirmation, and a valid transaction PIN (or device biometric unlock that releases the PIN locally).

3. Third parties we share data with

We share only what is needed to provide the service:

• OpenAI — conversation text and tool context are sent through our backend to generate assistant replies. Do not include secrets in chat; we instruct the model not to handle passwords or override purchase confirmation.
• Payment / virtual-account provider — used to create funding accounts and process inbound transfers that credit your wallet.
• Telecom fulfillment providers (including Nabatulu and other configured suppliers) — reached only through our backend to deliver data or airtime to the recipient number you choose.
• Infrastructure providers — hosting, database, cache/queue, and push delivery vendors that process data under our instructions.

We do not sell your personal information.

4. Retention

• Active accounts — we keep account, wallet, and transaction records while your account remains open and as needed for support, dispute handling, and legal/audit requirements.
• Deleted accounts — when you delete your account, we irreversibly remove or anonymize personal identifiers (name, email, phone, KYC fields, password/PIN hashes, push devices, and conversation content). Financial ledger and transaction rows may be retained in anonymized form for audit integrity and regulatory needs.
• Security logs — retained for a limited period to investigate abuse.

5. Your choices

• Update profile details available in the app.
• Disable biometric purchase confirmation in Profile / Settings.
• Turn off notification permissions in your device settings.
• Delete your account under Settings → Delete account (opens a secure browser confirmation; wallet available and reserved balances must be ₦0), or follow datagpte.com/delete-account (in-app steps and email request).
• Email [email protected] for privacy questions.

6. Security

We use HTTPS, short-lived access tokens with rotating refresh tokens, server-side session revocation, hashed OTPs and credentials, and role-based access for admin tools. No method of transmission or storage is perfectly secure; please protect your device and PIN.

7. Children

DataGPTE is intended for adults who can lawfully open a funded wallet and buy telecom products in Nigeria. We do not knowingly create accounts for children.

8. Changes

We may update this policy as the product evolves. The effective date at the top of this page will change when we do. Continued use after an update means you accept the revised policy.

9. Governing context

DataGPTE operates as a Nigeria-focused consumer fintech/telecom assistant. If a formal registered entity address is published later, this page will be updated. Until then, use [email protected] and datagpte.com.