Get paid privacy notice

Version 1, effective 7 November 2026. This notice explains how Weesify handles personal data when you set up Get paid to receive money on Weesify. It adds to Weesify's main privacy policy.

1. Who we are. Weesify, the address shown on your invoice, is the controller of this data. For merchants in Nigeria, the controller is Weesify, the address shown on your invoice. Contact our data protection officer, our data protection officer, at privacy@weesify.com.

2. What we collect.

• Your legal name, date of birth, country, address and contact details.
• For businesses: the registration number, name, directors and owners (25% or more).
• ID numbers you enter (BVN, NIN, national ID). We send them to our partner for the check and keep only the last four digits and a protected fingerprint used to spot duplicates. We never store the full number.
• ID document photos and a selfie, if you choose that check. Our partner holds the images; we keep the result.
• Payout bank or mobile money details.
• Check results, consent records, the time, and a protected form of your IP address.
• Records of your sales, payouts, refunds and disputes.

3. Why we use it, and our legal basis.

• To confirm who you are and keep payments safe: to meet anti-money-laundering and know-your-customer duties (legal obligation), and with your consent for each check.
• To pay you and run your account: performing our agreement with you.
• To prevent fraud and abuse, and to defend claims: legitimate interests.
• To answer regulators and the police where the law requires it: legal obligation.

4. Who we share it with.

• Verification partners: Smile ID, Dojah, Prembly and Flutterwave for ID numbers; Sumsub, Veriff, Persona or Onfido for ID documents and selfies. Get paid › Identity names the partner used for each check.
• Payment Partners that hold and pay out your money: Paystack, Flutterwave, Stripe, PayPal, Checkout.com, Adyen, PayChangu, dLocal, as applicable.
• Our hosting and email providers, under contracts that protect your data.
• Authorities, where the law requires it.

We never sell your data.

5. International transfers. Some partners process data outside your country. We use the safeguards your law requires, such as adequacy decisions, standard contractual clauses or your consent where allowed.

6. How long we keep it. Full ID numbers are never stored. Check results and transaction records are kept for at least five years after the business relationship ends (seven in Kenya, and up to ten where local law requires), as anti-money-laundering laws require. Unfinished checks are closed after seven days. ID document images are held by the partner under its contract with us. Then they are deleted or anonymised.

7. Automated decisions. A check can be approved automatically. If it is not, a person at Weesify reviews it before any refusal. You can appeal any decision in Get paid › Identity and a person will look at it.

8. Your rights.

• Access your data and get a copy: "Download my data" in Get paid › Identity, or email privacy@weesify.com.
• Correct it.
• Delete it, where we are not required to keep it.
• Object or restrict.
• Withdraw consent at any time (this does not undo past checks, and you may not be able to get paid without a current check).
• Complain to your data protection authority: the NDPC (Nigeria), the Data Protection Commission (Ghana), the ODPC (Kenya), the Information Regulator (South Africa), the PDPO (Uganda), the ICO (UK), your EU authority, or ANPD (Brazil).

9. Security. ID numbers are never stored in full. Data is encrypted in transit and at rest. Access is limited to staff who need it, and every access is logged.

10. Changes. We will tell you in Weesify before any material change takes effect.