1. Introduction & Scope
This Privacy Policy explains how VeePayNG (“we”, “us”, or “our”) collects, uses, stores, and protects personal information when you use our platform, captive portal storefronts, and automated MikroTik hotspot management services.
We are committed to processing your personal data in accordance with applicable data privacy legislation, including the Nigeria Data Protection Act (NDPA) and recognized international data protection principles.
2. Information We Collect
We collect information necessary to operate, automate, and secure the hotspot billing service. The information collected depends on whether you are a Hotspot Operator or an End-User Customer:
A. Hotspot Operators / Resellers
- Account Information: Business name, contact email address, phone number, and account password (stored securely as a cryptographic hash).
- Router & Network Configuration: MikroTik router IP addresses, API connection ports, API usernames, encrypted API passwords, and WireGuard VPN public keys and assigned IP addresses.
- Billing & Wallet Records: Top-up transaction logs, billing preferences (PAYG or monthly), wallet ledger balances, and payment gateway configuration tokens.
B. End-Users / Hotspot Customers
- Voucher Purchase Data: Email address provided during checkout (used strictly to deliver voucher credentials and transaction receipts), plan selected, and purchase timestamp.
- Payment References: Transaction identifiers and payment status tokens issued by third-party processors.
- Network Authentication: Voucher username and password/PIN, router session uptime, and byte transfer totals needed to enforce plan validity and quotas.
3. How We Use Information
We use the data we collect solely for legitimate operational purposes:
- Generating and provisioning hotspot voucher accounts on the operator’s MikroTik router upon confirmed payment.
- Delivering voucher access credentials and digital receipts to customers via email and web confirmation screens.
- Maintaining real-time synchronization between active router sessions and purchased plan limits.
- Executing automated background cleanup sweeps to delete expired vouchers, freeing router memory and storage.
- Processing wallet deductions for platform commission or monthly subscription fees.
- Detecting, preventing, and investigating fraud, abuse, or unauthorized access.
4. Payment Data & Security
We do NOT collect, process, or store credit/debit card numbers, CVVs, or bank PINs on our servers.
All online payments are processed through PCI-DSS Level 1 compliant payment gateways (such as Paystack and Flutterwave). When you make a payment, your payment details are encrypted and transmitted directly to the secure gateway. We only receive a transaction reference, the amount paid, and verification confirmation from the payment provider.
5. Encryption & Security Measures
We implement technical and organizational measures designed to protect your personal and network credentials:
- Encryption at Rest: Sensitive operator credentials (including MikroTik router API passwords and payment gateway private keys) are encrypted in our database using strong symmetric encryption (AES-256-GCM).
- Encryption in Transit: All web traffic to and from VeePayNG is encrypted using Transport Layer Security (HTTPS / TLS). Communication between our servers and operator routers is protected through secure WireGuard VPN tunnels or encrypted API channels.
- Credential Hashing: Passwords are never stored in plain text and are hashed using modern, salted one-way cryptographic algorithms (bcrypt).
- Access Restrictions: Administrative functions are protected by role-based access control and session management with CSRF defense.
6. Third-Party Integrations & Disclosures
We do not sell, rent, or trade your personal information to third parties. We share data only in the following limited circumstances:
- Payment Gateways: Sharing customer email addresses and transaction amounts with Paystack or Flutterwave to facilitate payment collection.
- Operator MikroTik Routers: Writing temporary voucher credentials to the operator’s configured router to grant local Wi-Fi access.
- Customer Support: Facilitating direct customer-to-operator support through deep links to WhatsApp when configured by the operator.
- Legal Obligations: When required by court orders, lawful requests from law enforcement agencies, or applicable statutory requirements.
8. Data Retention & Automatic Cleanup
We retain data only as long as necessary to fulfill the purposes outlined in this policy:
- Hotspot Vouchers: Once a voucher expires and its validity period has passed, our automated cleanup sweep systematically purges the voucher credentials from the router.
- Transaction Records: Purchase and sales records are maintained for accounting, dispute resolution, and audit trails as required by commercial regulations.
- Account Deletion: Operators can request account deactivation and removal of their stored router configuration by contacting support.
9. Your Privacy Rights
Under applicable data privacy laws, you have rights regarding your personal information, including:
- Access: The right to request confirmation of the personal data we hold about you.
- Correction: The right to update or correct inaccurate or incomplete account details directly through your operator account dashboard.
- Erasure: The right to request the deletion of your personal data when it is no longer required for legitimate business or legal purposes.
10. Contact Information & Data Inquiries
If you have any questions or concerns about this Privacy Policy, or wish to exercise your data rights, please contact us:
- Platform: VeePayNG Hotspot Automation
- Email: [email protected]
- Support: You can also reach our administration team via WhatsApp through the floating chat button on the website.