Privacy Policy
Contact: privacy@cardoplus.com · support@cardoplus.com
Quick Summary
We collect info you provide (name, phone, email, KYC) and info from use of the app (device, IP, transactions).
Card details are handled by PCI-DSS–compliant payment partners; CardoPlus does not store full PAN/CVV.
We don’t sell your data. We share with vetted providers (KYC, payments, fraud tools) under confidentiality.
You can access/update or request deletion of your data (subject to legal requirements).
Service is for 18+ only.
We use encryption and access controls to protect your data.
Full Policy
1) Scope
This Policy explains how CardoPlus collects, uses, shares, and protects personal information on our website and mobile app.
2) Information we collect
Identity & Contact: full name, email, phone.
KYC (where required): government ID, selfie/liveness, date of birth, address.
Account & Transactions: wallet balance, deposits/withdrawals, gift-card details, dispute history.
Technical: IP address, device info, app version, usage logs, cookies.
Support: messages and attachments you send us.
You may browse public pages without creating an account.
3) How we use information
Provide and operate CardoPlus services (trades, P2P, payments, remittance, withdrawals).
Verify identity, prevent fraud, manage risk, and enforce limits.
Process payments and send receipts/notifications.
Improve features, troubleshoot, and analyze performance.
Communicate about account, security, updates, and promotions (you can opt out of marketing).
4) Payments & sensitive data
Payments are handled by PCI-DSS–compliant processors (e.g., Paystack/Flutterwave/Stripe). We do not store full card PAN/CVV on CardoPlus servers.
5) Sharing information
We do not sell personal data. We may share with:
Service providers (KYC vendors, payment processors, cloud hosting, analytics, customer support) under confidentiality and security obligations.
Compliance & legal: where required by law, to protect users, our rights, or investigate fraud.
Corporate events: in a merger, acquisition, or asset sale, with notice where required.
6) Retention
We keep data while your account is active and as needed to comply with law, resolve disputes, and prevent fraud. When you close your account or request deletion, we delete/anonymize data subject to statutory retention periods.
7) Security
Encryption in transit (TLS) and at rest (where applicable), role-based access, logging/monitoring, and periodic reviews. No system is 100% secure; report issues to security@cardoplus.com.
8) Children
CardoPlus is intended for adults (18+). We do not knowingly collect data from children.
9) Your choices
Access/Update: via account settings or by contacting support.
Deletion: in-app or email privacy@cardoplus.com.
Marketing: opt out via unsubscribe.
10) Cookies
We use cookies and similar technologies for sign-in, analytics, and security. Manage preferences in your browser/device settings.
11) International transfers
Where data is processed outside Nigeria, we use reasonable safeguards and contracts with our providers.
12) Changes
We may update this Policy; we’ll post changes here with an updated Effective date.
