SilentAPI
Legal

Privacy Policy

This policy explains what personal data SilentAPI collects, why, who we share it with and the choices you have. It covers merchants who use our dashboard and API, their team members, and the customers who pay them through our checkout.

Last updated October 30, 2026 support@silentapi.site

1. Data we collect

Merchants and team members: name, business name, email, phone number, password (stored only as a one-way hash), business address, business registration number, government ID type, number and document image, the last 4 digits of your BVN (the full BVN is checked with our payment partner and not stored), and settlement bank details.

Customers paying a merchant: name, email, amount, payment method and the sender name provided by the bank for transfers. Card details are entered on our payment partner's secure pages — we never see or store full card numbers.

Automatically: IP address, sign-in times and an activity log of security-relevant actions.

2. How we use it

  • To provide the service: process payments, credit wallets, send payouts and deliver webhooks.
  • To verify identity and businesses (KYC) and to prevent fraud and money laundering, as required by Nigerian law and our partners.
  • To secure accounts — for example sign-in history and email verification codes.
  • To send service messages such as receipts, verification results and security alerts. We do not send marketing without your consent.

3. Who we share it with

  • Paystack, our licensed payment partner, to process payments, transfers, account look-ups and identity checks.
  • Banks and payment networks involved in a transaction.
  • Email and hosting providers that run the service for us, under confidentiality obligations.
  • Regulators, law enforcement or courts when the law requires it.

Merchants see the payment details of their own customers. We do not sell personal data.

4. How long we keep it

We keep account, KYC and transaction records for as long as your account is open and afterwards for as long as financial and anti-money-laundering laws require (generally at least five years). Sign-in and activity logs are kept with your account for security and fraud investigation. When data is no longer needed we delete or anonymise it.

5. Security

Data is encrypted in transit (TLS). Passwords and API secret keys are stored only as hashes, and webhook payloads are signed. KYC documents are stored outside the public website and are only viewable by authorised staff. Access is limited to people who need it, and administrative actions are logged.

6. Your rights

Under the Nigeria Data Protection Act 2023 you can ask to access, correct or delete your personal data, object to or restrict its use, and request a copy in a portable format. Some data must be kept by law even if you ask us to delete it. You can update most details yourself in Settings, or email support@silentapi.site. You may also complain to the Nigeria Data Protection Commission.

7. Cookies

We use a session cookie to keep you signed in and protect forms, and your browser's local storage to remember preferences such as light/dark theme. We do not use advertising or tracking cookies.

8. Changes and contact

We may update this policy; the date at the top shows the latest version. Questions or requests: support@silentapi.site. See also our Terms of Service.