Legal

1. Introduction

This Privacy Policy explains how Pleep (“Pleep”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal information when you use our website, mobile applications, WhatsApp experiences, APIs, and related services (collectively, the “Services”).

Pleep is a multi-currency financial technology platform that enables individuals and businesses across Africa to send, receive, hold, convert, and spend money across local and international currencies. Pleep is not a bank. Banking services, payment processing, virtual accounts, virtual cards, identity verification, and other regulated financial services are provided through licensed banking and financial institution partners.

By creating an account or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Services.

2. Information We Collect

We collect information you provide directly, information generated through your use of the Services, and information we receive from partners and identity providers.

3. How We Use Your Information

We use personal information to:

• Create and manage your account, wallets, cards, and payment methods
• Process transfers, conversions, settlements, and related financial instructions
• Verify identity, prevent fraud, and meet KYC, AML, CTF, sanctions, and PEP obligations
• Operate AI assistants that act only on authenticated user instructions
• Provide customer support, notifications, receipts, and statements
• Improve product performance, security, and user experience
• Comply with legal, regulatory, audit, and reporting requirements
• Communicate service updates, security alerts, and (where permitted) product information

4. Legal Bases for Processing

Depending on your location, we process personal information on one or more of the following bases: performance of a contract; compliance with legal obligations; legitimate interests (such as securing our platform and preventing abuse); and consent where required (for example, certain marketing or optional cookies).

Where Nigerian data protection rules apply, we process personal data in accordance with the Nigeria Data Protection Act (NDPA) and applicable NDPR guidance. Where EU/UK GDPR applies to you, we process personal data under the lawful bases described above.

5. How We Share Information

We do not sell your personal information. We may share information with:

• Licensed banking, payment, card issuing, liquidity, and settlement partners needed to deliver the Services
• Identity verification and compliance vendors (for example, providers similar to IdentityPass or Smile Identity)
• Infrastructure, analytics, cloud, and security providers acting on our instructions
• Professional advisers, auditors, and insurers under confidentiality obligations
• Regulators, law enforcement, or courts where required by law or to protect rights and safety
• A buyer or successor in connection with a merger, acquisition, or corporate reorganization

6. International Transfers

Because Pleep supports cross-border payments and works with global infrastructure partners, your information may be processed in countries other than where you live. Where we transfer personal data internationally, we take steps designed to provide appropriate safeguards consistent with applicable law.

7. Data Retention

We retain personal information for as long as needed to provide the Services, meet legal and regulatory retention requirements (including AML recordkeeping), resolve disputes, and enforce our agreements. Retention periods vary by data type and jurisdiction. When information is no longer required, we delete or anonymize it where feasible.

8. Security

We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit where appropriate, access controls, multi-factor authentication options, device and session controls, fraud monitoring, rate limiting, and audit logging.

No method of transmission or storage is completely secure. You are responsible for safeguarding your credentials, devices, and any messaging channel used to instruct Pleep.

9. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, secure the Services, remember preferences, and understand how the Services are used. You can control cookies through your browser settings. Disabling certain cookies may affect functionality.

10. Your Rights

Subject to applicable law, you may have rights to access, correct, update, delete, or restrict certain personal information; object to certain processing; withdraw consent where processing is consent-based; and request a portable copy of data you provided.

You may also have the right to lodge a complaint with a relevant data protection authority. To exercise rights, contact us using the details below. We may need to verify your identity before fulfilling a request, and some requests may be limited by legal or regulatory obligations.

11. Children’s Privacy

The Services are not directed to children and are intended for users who meet the eligibility requirements in our Terms of Service. We do not knowingly collect personal information from children in violation of applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version and revise the “Last updated” date. Material changes may be communicated through the Services or by other reasonable means.

13. Contact Us

For privacy questions, requests, or complaints, contact Pleep at support@pleep.io or through in-app support. For questions about this policy, contact Pleep at support@pleep.io. Our business address is No. 1 Adedeji Adekola, Lekki, Ikate, Lagos, Nigeria.