Privacy Policy

Who we are

Vastel Business (“we”, “us”) provides crypto-to-Naira payment processing for businesses in Nigeria. We generate deposit wallets for merchants' end users, convert received crypto to Naira on our rails, credit merchant balances, send settlement notifications, and support bank withdrawals.

Information we collect

• Merchant account data — email, password (hashed), security PIN (hashed), business name, registration details, website, and bank account information.
• Identity & KYC — full name, phone number, BVN or NIN (encrypted at rest), residential address, and optional supporting documents (e.g. CAC certificate, director ID).
• End-user data you submit via API — identifiers such as external user ID, name, email, and wallet-related metadata needed to provision deposits and notify you of settlements.
• Transaction & technical data — deposit and conversion records, ledger entries, IP addresses, device/user-agent on API and dashboard requests, and webhook delivery logs.

How we use information

• Create and secure merchant accounts, including email verification and login OTPs.
• Verify identity (BVN/NIN name-match) and prevent duplicate accounts using unique email, phone, and identity hashes.
• Process crypto deposits, convert to Naira, credit balances, and send merchant webhooks.
• Authorize withdrawals with your security PIN and process bank payouts.
• Detect fraud, enforce platform fees, comply with law, and improve reliability.

Legal bases & sharing

We process data to perform our contract with you, meet compliance obligations, and protect legitimate interests such as security and abuse prevention. We may share data with identity-verification and payment infrastructure providers strictly as needed to operate the service, and with regulators or law enforcement when required by law. We do not sell merchant or end-user personal data.

Retention & security

Sensitive fields (including BVN/NIN and addresses) are encrypted at rest. Passwords and security PINs are hashed. We retain transaction and KYC records for as long as needed for settlements, audits, dispute resolution, and legal retention requirements, then delete or anonymize where practicable.

Your choices

Merchants can access account details from the dashboard Profile, reset security PINs via email OTP, and request corrections to business information during onboarding (subject to review status). For deletion or data access requests, contact us using the details on your merchant agreement or support channel.

Children

Vastel is a B2B merchant platform and is not directed at children under 18.

Changes

We may update this policy as the product evolves. Material changes will be reflected on this page with a new “Last updated” date. Continued use of Vastel after changes constitutes acceptance of the updated policy.

Contact

Questions about privacy: reach out via your Vastel Business dashboard support channel or the contact on your onboarding agreement. Create an account or return home.