FlexBuy operates FlexBuy. This policy explains what data we collect, why we collect it, who we share it with, and the choices you have.
What we collect
Identity data
Name, date of birth, government ID number, address, phone, and email. Required to open an account and satisfy KYC / anti-money-laundering law.
Financial data
Bank account information (if you link one), the tokenized card reference from our payment processor, and repayment history. We do not store raw card numbers; those are stored by the payment processor under PCI-DSS scope.
Transaction data
Every loan, repayment, refund, and dispute — used to service your account and improve underwriting.
Device and usage data
A stable device identifier and push token so we can send reminders. IP address, user agent, and event logs for fraud detection.
Why we collect it
- To provide the service you signed up for.
- To comply with KYC / AML / consumer-credit law.
- To detect and prevent fraud.
- To improve our underwriting model.
- To communicate with you about your account.
Who we share it with
Only the third-party services this deployment has enabled. Each has its own privacy policy that governs their handling of your data:
- Payment processor (Stripe or Paystack) — to charge your saved payment method.
- KYC provider (Onfido, Smile ID, Prembly, or admin review) — to verify your identity.
- Push notifications (Firebase Cloud Messaging) — to deliver reminders to your phone.
- Transactional email (PostaLynk, SES, or configured mailer) — to send email confirmations.
- Credit bureaus — where enabled by the operator for that jurisdiction.
We do not sell your personal data to advertisers or data brokers.
How long we keep it
Active-account data is retained while your account is open. After account closure, we retain records for as long as required by consumer-credit and anti-money-laundering law in your jurisdiction (typically 5–7 years), then delete.
Your rights
Depending on your jurisdiction, you may have the right to access, correct, port, or delete your personal data. To exercise a right, email [email protected]. We respond within 30 days.
Changes to this policy
We post revisions here with an updated date. Material changes are communicated by email.
Contact
Questions about privacy: [email protected].