Privacy Policy

Wagefy is a payroll and HR platform for Nigerian businesses, operated by Loopvision ("Wagefy", "we", "us"). It is available at usewagefy.com, at employee.usewagefy.com, and through the Wagefy mobile apps for iOS and Android.

For the account details of business administrators, we act as the data controller. For the employee records a business stores in Wagefy — names, salaries, bank details, tax information — we act as a data processor on that business's instructions: your employer decides what is stored and who can see it.

This policy is written to comply with the Nigeria Data Protection Act (NDPA) 2023 and applies to all Wagefy websites and apps.

Account information. When you create an account we collect your name, email address, phone number, and password. Business accounts also provide company details such as the company name, address, registration information, and state tax Payer IDs.

Employee records. Businesses store their employees' names, contact details, salaries, bank account numbers, Tax Identification Numbers (TIN), state of residence, departments, shifts, and leave records. Employees who self-onboard provide these details directly, subject to their employer's approval.

Financial and transaction data. Wallet balances, salary transfers, PAYE remittances, and related transaction references are processed through our banking partner, Providus Bank. We keep transaction records so you have an auditable payroll history.

Device and usage data. We collect the device type, operating system, app version, and log data (such as IP address and timestamps) needed to keep the service secure and reliable. The mobile app stores a push notification token if you allow notifications.

Face ID / biometrics. If you enable biometric sign-in on the mobile app, the check happens entirely on your device using Apple or Google's own systems. Your fingerprint or face data never reaches Wagefy's servers, and we cannot access it.

We use the information above to:

• run payrolls and pay salaries into employees' bank accounts;
• calculate PAYE under the Nigeria Tax Act 2025 and remit it to state tax authorities on your instruction;
• create and manage your company's Providus Bank wallet;
• send service messages — payslips, payroll confirmations, security alerts, and leave updates — by email and push notification;
• keep accounts secure: PIN checks, OTP verification, and fraud monitoring;
• provide support when you contact us; and
• meet legal obligations, such as tax and anti-money-laundering rules.

We do not sell your personal data, and we do not use employee payroll records for advertising.

Under the NDPA 2023, we process personal data where:

• a contract requires it — running payroll for your company is the service itself;
• the law requires it — PAYE computation, remittance records, and financial audit trails;
• we have a legitimate interest — keeping the platform secure and preventing fraud; and
• you consent — for optional things like push notifications and product emails, which you can withdraw at any time.

We share personal data only where the service requires it:

• Providus Bank — to create virtual accounts, process salary transfers, and remit PAYE. The bank processes this data under its own regulatory obligations.
• State tax authorities — PAYE schedules and remittances are filed with the relevant State Internal Revenue Service when you instruct us to.
• Service providers — hosting, email delivery, and push notification infrastructure, bound by data processing agreements.
• Law enforcement or regulators — only where a valid legal demand requires it.

Within your company, access follows the roles your administrators configure — an employee sees their own payslips; only authorised admins see company-wide payroll.

Data is encrypted in transit and at rest with 256-bit encryption. Every payout requires a transaction PIN, and sensitive actions are verified with one-time passcodes. Access to production systems is restricted and logged, and payroll actions leave an audit trail your administrators can review.

No system is perfectly secure. If a breach ever affects your personal data, we will notify the Nigeria Data Protection Commission and affected users as the NDPA requires.

We keep your data while your account is active. Payroll and transaction records are retained for the period Nigerian tax and financial regulations require, even after an account closes — these records are your company's statutory audit trail.

When retention periods end, data is deleted or irreversibly anonymised. You can request account deletion at any time from the mobile app's settings or by emailing us; we will delete everything not covered by a legal retention duty.

Under the NDPA 2023 you can:

• access a copy of the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion, subject to statutory retention;
• object to or restrict certain processing;
• withdraw consent for optional processing; and
• complain to the Nigeria Data Protection Commission.

If your data was entered by your employer, we may direct your request to them as the controller — but we will always help you exercise these rights. Email support@usewagefy.com and we will respond within 30 days.

Wagefy is a workplace tool. It is not directed at anyone under 18, and we do not knowingly collect data from children. If you believe a minor has provided us personal data, contact us and we will delete it.

When we change this policy in a way that matters, we will update the effective date at the top and notify administrators by email before the change takes effect. Continued use of Wagefy after that date means the updated policy applies.

Questions about this policy or your data: support@usewagefy.com

Wagefy · Loopvision · Lagos, Nigeria