Privacy Policy

Last updated June 2026

CrossPay is pre-launch. This document is a draft for transparency and will be finalised with legal counsel before public launch.

This Privacy Policy explains how CrossPay ("CrossPay", "we", "us") collects, uses, shares, and protects your personal information when you use our website and mobile app (the "Service"). We are committed to handling your data in line with South Africa's POPIA and Nigeria's NDPR.

1. Information we collect

Identity & KYC: name, date of birth, ID/passport, BVN/NIN, selfie/liveness, and proof of address where required.
Contact: phone number and email address.
Transaction: amounts, currencies, recipients/senders, payout bank details, and status.
Device & usage: device identifiers, app interactions, and approximate location for fraud prevention.

2. How we use your information

To verify your identity and meet KYC/AML and Travel-Rule obligations.
To process and settle your transfers and provide support.
To detect, prevent, and investigate fraud and prohibited activity.
To comply with legal and regulatory requirements and improve the Service.

3. How we share information

We share data only as needed: with licensed on/off-ramp, custody and KYC partners to perform the Service; with banks and payment providers to complete payouts; with regulators, law enforcement, and auditors where legally required; and with service providers under contract. We do not sell your personal information.

4. Cross-border transfers

Because CrossPay operates across the South Africa–Nigeria corridor, your information may be processed in either country and by partners abroad. We apply appropriate safeguards for such transfers.

5. Data retention

We keep KYC and transaction records for at least five years after your last activity, or longer where the law requires, and delete or anonymise data when it is no longer needed.

6. Security

We use encryption in transit and at rest, access controls, device binding, and PIN/biometric authentication. Custody of funds is handled by regulated partners. See our Security page for more.

7. Your rights

Subject to law, you may request access to, correction of, or deletion of your personal information, and object to certain processing. To exercise these rights, contact us. Note that some data must be retained to meet legal obligations.

8. Cookies

Our website uses essential and analytics cookies to operate and improve the site. You can control cookies in your browser.

9. Children

The Service is not directed at anyone under 18, and we do not knowingly collect their information.

10. Changes & contact

We may update this policy and will post changes here. Questions or requests: privacy@crosspay.co.za.