What we hold, and what you can do about it
This explains what AYPRO collects when you buy airtime, data or a meter token, why we collect it, who else sees it, and how long we keep it.
In effect 1 October 2026 · version 2026-10-01
Who we are
AYPRO Bessere Technologies Nigeria Limited (RC 1477387), No. 9, T.O.S Benson Crescent, Utako District, Abuja. We are the data controller for everything described here, which means we decide what is collected and we answer for it.
For anything on this page, write to ayprosupport@aypro.com.ng. We answer within one month, which is the limit the law sets.
What we collect, and why
Everything we hold about you is in this table. If it is not listed here, we do not collect it.
Your name, phone number and email address
- Why
- To open your account, sign you in, and send you receipts
- Our reason
- To do what you asked us to do
- Kept
- While your account is open. Removed when you close it, and the empty record goes ninety days later
Your Market listing: shop or service name, what you offer, where you are, your contact numbers and up to three photos
- Why
- To show your shop or service to other AYPRO users who search the Market, because you chose to list it
- Our reason
- To do what you asked us to do
- Kept
- While the listing is up. Thirty days after you take it down, then deleted; deleted at once when you close your account
What our photo check saw in each listing photo (a short description, tags, whether it looked like spam)
- Why
- To keep unsafe and spam pictures off the Market and to make listings findable. The photo is sent to Google Vertex AI in the European Union for this
- Our reason
- To do what you asked us to do
- Kept
- With the photo
Reviews you write on other people's listings (stars and a few words, shown with your first name and initial)
- Why
- To help other users choose, and to rank shops fairly
- Our reason
- To do what you asked us to do
- Kept
- While the listing exists; deleted when you close your account
Which listings you opened, by day
- Why
- So the owner sees how many people looked at their page. They see a number, never who
- Our reason
- To keep the service working and safe
- Kept
- Ninety days
Reports you make about a listing or a review, and people you have blocked
- Why
- To act on what you tell us is wrong, and to keep what you asked not to see out of your view. The person reported or blocked is not told who did it
- Our reason
- To keep the service working and safe
- Kept
- A block until you lift it. A report while it is open, then one year
Photo credits you bought and spent
- Why
- A listing photo costs ₦200; this is the record of what you paid for
- Our reason
- To do what you asked us to do
- Kept
- Six years, as a financial record
Your password and transaction PIN
- Why
- To sign you in and to approve spending from your wallet
- Our reason
- To do what you asked us to do
- Kept
- While your account is open. They are scrambled before we store them, so nobody here can read them
Your Google account identifier, if you sign in with Google
- Why
- To recognise you when you choose Google instead of a password
- Our reason
- To do what you asked us to do
- Kept
- While your account is open
What you bought, for whom, when and for how much
- Why
- To deliver the airtime, data or token, and to show you your receipts
- Our reason
- To do what you asked us to do
- Kept
- Six years, because tax and company law require us to keep financial records
The phone number, meter number or smartcard number you are topping up
- Why
- To send the top-up to the right line, and to offer saved recipients
- Our reason
- To do what you asked us to do
- Kept
- Six years with the purchase. Saved recipients until you delete them
Your wallet balance and the money moving through it
- Why
- To hold your funds accurately and settle what you spend
- Our reason
- To do what you asked us to do
- Kept
- Six years, as a financial record
The last four digits of your card, the card type and the expiry date, kept by our payment provider
- Why
- So you can pay again without re-entering the card
- Our reason
- Because you agreed, and you can take that back
- Kept
- Until you remove the card. The full card number never reaches AYPRO
Your bank account number and name, where a virtual account is issued to you
- Why
- To credit your wallet when you transfer money in
- Our reason
- To do what you asked us to do
- Kept
- While the account is active, then six years as a financial record
Identity checks: your BVN, NIN or a document you upload
- Why
- To verify who you are where the law requires it before you can transact
- Our reason
- Because the law requires us to keep it
- Kept
- Six years. We keep a scrambled version and the last four digits, never the whole number
Your device, app version and push token
- Why
- To send you notifications and to spot a sign-in that is not you
- Our reason
- To keep the service working and safe
- Kept
- While the device is active, then ninety days
Sign-in sessions, IP address and browser
- Why
- To keep you signed in, and to investigate fraud or a security incident
- Our reason
- To keep the service working and safe
- Kept
- Thirty days for sessions
A record of what you did on AYPRO: purchases, sign-ins, and changes to your account
- Why
- To answer your questions about your account, and to prove what happened if you dispute something
- Our reason
- To keep the service working and safe
- Kept
- One year
Records of errors: the page you were on, what went wrong, and the kind of phone or browser
- Why
- To find and fix faults. We keep the kind of device and only the first part of your network address, never the full address or your name
- Our reason
- To keep the service working and safe
- Kept
- Thirty days; a fault on our side ninety days, so it can be fixed and checked
Messages we send you by email, text or push notification
- Why
- To send receipts, codes and service messages, and to prove we sent them
- Our reason
- To do what you asked us to do
- Kept
- One year
Your name, phone number, city, email address and the answers you give, if you ask to hear from us about new services
- Why
- To email you about AYPRO news, services and offers, and to learn what people in each city use today
- Our reason
- Because you agreed, and you can take that back
- Kept
- Until you unsubscribe, or twenty-four months, whichever comes first
How you use the site, if you accept analytics cookies
- Why
- To see which pages people use, so we can fix the ones that do not work
- Our reason
- Because you agreed, and you can take that back
- Kept
- Fourteen months, by Google Analytics
Who else sees it
We do not sell your information, and we do not share it for anyone else’s advertising. These are the only companies that receive it, and exactly what each one gets.
Paystack
Takes your payment
- They get
- Your email address and the amount. Your card details go to them, not to us
- Where
- Nigeria
VTU.ng
Delivers the airtime, data or token
- They get
- The number you are topping up, and what you bought for it
- Where
- Nigeria
Neon
Runs the database your account is stored in
- They get
- Everything in the table above, as the store of record
- Where
- Germany (Frankfurt)
- Leaving Nigeria
- Necessary to perform your contract with us (NDPA s.43)
Google Cloud
Runs the servers this website is served from
- They get
- Everything passing through the site, in transit and in memory
- Where
- Netherlands
- Leaving Nigeria
- Necessary to perform your contract with us (NDPA s.43)
Google (Sign-In)
Signs you in, if you choose Google
- They get
- Only that you signed in. We receive your Google ID, name and email
- Where
- United States
- Leaving Nigeria
- Your consent, given when you choose to sign in with Google (NDPA s.43)
Google Analytics
Counts visits, only if you accept analytics cookies
- They get
- Pages you viewed and a cookie identifier. Never your name or what you bought
- Where
- United States
- Leaving Nigeria
- Your consent, which you can withdraw at any time (NDPA s.43)
Your information leaving Nigeria
Paying and getting your top-up both stay in Nigeria. Paystack and the supplier that delivers your airtime are Nigerian companies, so the number you top up and the money you spend do not leave the country.
What does leave is the storage underneath. The computers that hold your account and run this website are in Germany and the Netherlands, so your details sit there. We cannot keep an account for you without somewhere to keep it, and section 43 of the Nigeria Data Protection Act allows a transfer that is necessary to carry out your own contract with us.
For Google Sign-In and analytics the reason is your consent instead, so you can withdraw it and the transfer stops. The table above names every company, where it is, and which of these applies.
Cookies
The cookie that keeps you signed in is always on, because without it you could not stay signed in. Analytics cookies stay off until you turn them on, and nothing goes to Google Analytics before you do.
You can change your mind whenever you like, from Cookie settings at the bottom of any page.
Your rights
The Nigeria Data Protection Act 2023 gives you these rights over your information. All of them work, and none of them need you to ask anyone.
See what we hold
Download everything on your account, from your settings
Fix what is wrong
Change your name or email in your settings
Delete your account
Close it from your settings. There is a note below about receipts
Take your data elsewhere
Your download is a file another service can read
Object to how we use it
Email ayprosupport@aypro.com.ng and tell us what to stop
Withdraw consent
Unsubscribe from any email, or change your cookie choice in the footer
Complain
To us first, then to the Nigeria Data Protection Commission at ndpc.gov.ng
Closing your account
When you close your account we remove your name, email and phone number, and the numbers you topped up stop being linked to you. The purchase records themselves stay for six years with your details taken out of them, because tax and company law say we have to keep financial records for that long. After six years those go too. The closed account itself is deleted ninety days after you close it.
Keeping it safe
Your password and transaction PIN are scrambled before we store them, so nobody at AYPRO, including our support team, can read them. Your full card number never reaches us at all; Paystack handles that. Identity documents are kept as a scrambled value and the last four digits, never the whole number. Everything you send travels encrypted, and it stays encrypted where we store it.
If something does go wrong and your information is at risk, we tell the Nigeria Data Protection Commission within 72 hours, and we tell you too if it affects you.
Complaining
Start with us at ayprosupport@aypro.com.ng. If we do not put it right, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng. You do not need our permission, and it costs you nothing.
Changes
When this notice changes in a way that matters, we update the version at the top and tell you before it takes effect. Ask us for an older version any time and we will send it.