How PaySphere works

What you do

You sign up with email and password, or with Google. You must be 18 or older and in Nigeria. Email signup asks you to tick that you accept the Terms and Privacy Policy. Google signup should show the same notice before you use the account.

What we collect

Name, email, and a password hash (or your Google account email and name). We also receive a bot-check token from Cloudflare Turnstile on some forms.

Who we send it to

Supabase stores your account. Google receives your sign-in if you choose that path. Turnstile sees the form request. Vercel sees the page request (including IP).

How long we keep it

Your account until you delete it, then for up to 7 years where financial record rules require it.

What you do

You open Verify Identity, enter your 11-digit BVN, and take a selfie for a liveness check. This unlocks higher limits and withdrawals. You can browse some screens without it.

What we collect

The result of the BVN check (match, name returned). We do not keep your full BVN. We keep at most a masked display value. Dojah processes the selfie and liveness images.

Who we send it to

Dojah looks up BVN and runs facial liveness. Our servers confirm the widget result. We may send a short admin alert (name and email) when verification finishes.

How long we keep it

Verification flags on your profile. Selfie and ID images are processed by Dojah. We keep the outcome for fraud and compliance, not a copy of your full BVN.

What you do

You pick the brand, country, and card type, enter the face value, and upload clear photos of the card. Our team reviews the trade and, if it is valid, credits NGN to your wallet.

What we collect

Card brand, amount, photos, and the NGN we calculate from our rate (not a figure you type as payout).

Who we send it to

Photos go to our storage (card-images). Staff see them in the admin console. If the card is an open-loop Visa or Mastercard gift card, the photo can show a PAN. Treat those photos as sensitive.

How long we keep it

Trade records and images for review, disputes, and the 7-year record period. Paid trades are final as set out in the Refund Policy.

What you do

Approved trades and some other credits land in your NGN wallet. You can add NGN through Flutterwave hosted checkout. You withdraw to a Nigerian bank you have saved, after PIN and BVN.

What we collect

Wallet balance, funding references, withdrawal amount, bank name, account number, and account name we resolve through Flutterwave.

Who we send it to

Flutterwave processes checkout, name enquiry, and bank transfers. We do not take your debit-card PAN for wallet funding. That stays on Flutterwave's page.

How long we keep it

Ledger rows and payment references so we can prove what was paid. Bank details stay on your profile until you change or delete them (subject to retention).

What you do

You open Bills, pick airtime, data, or another listed biller, enter the phone or account number, and confirm with your PIN. We debit your wallet and send the payment through our bill partner.

What we collect

Biller, amount, destination number, and the PIN check (the PIN itself is hashed; it is not stored in plain text).

Who we send it to

Flutterwave or the connected bill API receives the payment instruction. We do not send your PIN to the biller.

How long we keep it

A transaction record in your history.

What you do

You open Crypto, pick a coin and network, tap Check Address, then send only that coin on that network. You do not get a crypto balance. After the network confirms, we credit NGN at the rate at conversion time.

What we collect

The receive address we generate for you, the network, amounts, timestamps, and the conversion rate.

Who we send it to

Bitnob issues the address and tells us when a deposit is confirmed. We then credit your NGN wallet. Blockchain records are public.

How long we keep it

Address mapping and the NGN credit. We do not store private keys or seed phrases. We do not hold crypto for you.

What you do

You pick a country and plan, pay from your wallet with your PIN, then install the eSIM from My eSIMs using the QR or code we show.

What we collect

Country, plan, price we charged, and the eSIM identifiers needed to install and support the plan.

Who we send it to

Sotel (our eSIM supplier) provisions the plan. Your device maker is not sent your PaySphere password.

How long we keep it

Purchase and install details so you can recover the eSIM in the app.

What you do

You pick a product, accept the checkout terms, and pay with your wallet PIN. We source the item after payment. After we mark it delivered, you have 24 hours to upload a sealed-package unboxing video. Claims after that window are void.

What we collect

Product, quantity, delivery address, phone, the time you accepted the terms, delivery time, and the unboxing video if you upload one.

Who we send it to

Staff use this to source and deliver. WhatsApp support is only from the order page after you have paid. The unboxing video is stored privately and shown to staff with a short-lived link.

How long we keep it

The order and video for the dispute window and our record period.

What you do

You can share a referral code. If a friend signs up with it and completes a qualifying action, we may credit a bonus. Points and levels track activity. They have no cash value.

What we collect

Your code, who used it, and points events.

Who we send it to

Nothing extra beyond our own database, unless you share the link yourself.

How long we keep it

Referral and points history on the account.

What you do

You set a 4-digit transaction PIN for money movement. You can contact support by email or in-app chat (Ruby). The site may ask for location permission to help flag unusual logins.

What we collect

PIN hash (not the PIN), login IP, city or country, device or browser, optional GPS if you allow it, chat messages, and crash reports.

Who we send it to

Sentry receives error reports with payment and PIN fields stripped where we have configured masking. Telegram may receive an internal alert for a new login or a support event. Resend sends transactional email.

How long we keep it

Login and chat records for security. You can export a copy of some account data from Settings and delete your account from Profile or paysphere.ng/delete-account.