Privacy Policy

This Privacy Policy ("Policy") explains how Greatness Data Services ("GDS," "we," "us," or "our") collects, uses, shares, and protects information when you use our website (www.gds.com.ng), our mobile application ("App"), and related services (collectively, the "Services").

By creating an account, accessing, or using our Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree with this Policy, please do not use our Services.

1. Information We Collect

1.1 Information You Provide Directly

• Account information: Full name, email address, phone number, and password when you register.
• Identity verification (KYC): Bank Verification Number (BVN) and related identity details, only when you choose to generate a dedicated virtual account for wallet funding, as required by Central Bank of Nigeria (CBN) regulation.
• Transaction details: Recipient phone numbers, meter numbers, smart card numbers, exam registration details, and other information needed to process the service you request (e.g. airtime, data, TV subscription, electricity, exam pins).
• Payment information: When you fund your wallet by card or bank transfer, your payment is processed directly by our licensed payment partner (Paystack). We do not collect or store your full card details on our servers.
• Support communications: Information you share with us via WhatsApp, email, or in-app support requests.

1.2 Information Collected Automatically

• Device information: Device model, operating system version, unique device identifiers, and mobile network information.
• Usage data: Pages visited, features used, transaction history, login times, and app activity logs.
• Push notification tokens: A unique Firebase Cloud Messaging (FCM) token used to deliver notifications to your device.

1.3 Information From Your Device (Only With Your Permission)

The table below lists the specific permissions our App may request, why we need them, and how they are used.

Permission	Why We Request It	What We Do With It
Contacts	To let you quickly select a phone number when buying airtime, data, or sending bulk SMS.	Used only on your device to fill in a phone number field. We do not upload, store, or transmit your contact list to our servers.
Notifications	To alert you about transaction status, wallet funding, promotions, and important account updates.	Delivered via Firebase Cloud Messaging. You can disable notifications anytime in your device settings.
Storage (Save Receipt)	To save a copy of your transaction receipt as an image to your device when you choose to download or share it.	The receipt image is generated on your device and saved locally; it is not uploaded to our servers.
Biometric / Fingerprint	To let you securely confirm transactions using your fingerprint instead of typing a PIN, if you choose to enable this.	Biometric data is processed entirely on your device using your device's secure hardware. We never receive or store your fingerprint data.

2. App Permissions We Request

Our App only requests permissions that are necessary for the features you actively use. You can review and change app permissions at any time from your device's Settings menu. Denying a permission may limit access to the related feature (for example, denying Contacts access means you'll need to type phone numbers manually), but will not prevent you from using the rest of the App.

3. How We Use Your Information

We use the information described above to:

• Create and manage your account.
• Process airtime, data, TV, electricity, exam pin, betting wallet, recharge card, and other bill payment transactions you request.
• Process wallet funding via virtual account, bank transfer, or card payment (Paystack).
• Verify your identity for dedicated virtual account creation, in compliance with CBN regulations.
• Send transaction receipts, confirmations, and account notifications.
• Provide customer support and respond to inquiries.
• Detect, investigate, and prevent fraud, unauthorized transactions, and abuse of our Services.
• Improve our Services through analytics and usage trends.
• Comply with applicable laws, regulations, and lawful requests from government or regulatory authorities.

4. How We Share Your Information

We do not sell your personal information. We only share information in the following circumstances:

• Service providers: With payment processors (e.g. Paystack), SMS/airtime/data aggregators, and infrastructure providers (e.g. Firebase/Google) solely to deliver the Services you request.
• Legal compliance: When required by law, regulation, legal process, or governmental request, including compliance with CBN and other financial regulatory obligations.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to confidentiality protections.
• With your consent: Where you have given explicit permission for a specific purpose.

5. Third-Party Services

Our App integrates with the following third-party services, each governed by their own privacy policies:

• Paystack — for secure card and bank transfer payments. View Paystack's Privacy Policy.
• Firebase (Google) — for push notifications and app performance. View Google's Privacy Policy.
• Telecommunications & utility partners — to fulfil airtime, data, TV, and electricity purchases on your behalf.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit using HTTPS/TLS.
• Encrypted local storage of sensitive data (such as your transaction PIN) directly on your device.
• Restricted access to personal data on a need-to-know basis within our organization.
• Optional biometric authentication for an additional layer of transaction security.

While we take reasonable steps to protect your information, no method of transmission or storage is 100% secure. We encourage you to use a strong password and enable biometric or PIN protection within the App.

7. Data Retention

We retain your account and transaction information for as long as your account is active, and afterward for as long as necessary to comply with our legal, accounting, fraud-prevention, and regulatory obligations (including financial record-keeping requirements applicable in Nigeria). Activity logs and transaction records are generally retained for a minimum of 5 years in line with standard financial services practice.

8. Your Rights & Account Deletion

You have the right to:

• Access and review the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your account and associated personal data, subject to our legal and regulatory retention obligations described above.
• Withdraw consent for optional features (e.g. push notifications, biometric authentication) at any time via your device settings or in-app settings.

9. Children's Privacy

Our Services are not directed to, and are not intended for use by, individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will post the updated Policy on this page with a revised "Last Updated" date. We encourage you to review this Policy periodically.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: