Privacy Policy

Last updated: 16 Aug 2025

This Privacy Policy describes how Mabro (“we”, “us”) collects, uses, discloses, and safeguards information when you use our WhatsApp bot, websites, and related services (the “Service”).

1) The data we collect

  • Identification: WhatsApp number (MSISDN), session IDs, request IDs.
  • Profile & wallet: name (if provided), wallet balance and ledger entries, top‑up and spend history.
  • Transaction data: service type, amounts, phone/meter/smartcard numbers, product codes, tokens, and receipts.
  • Technical: logs (timestamps, status codes), device/network metadata provided by WhatsApp/hosting, and basic cookies on our web pages (see Cookies).
  • Support: messages you send to support channels.

2) Why we process your data (lawful bases)

  • Contract: to create your wallet, process orders, deliver tokens/receipts, and handle refunds or reversals.
  • Legitimate interests: to secure the Service, prevent fraud, improve reliability, and provide customer support.
  • Legal obligations: to keep records required by law and comply with requests from competent authorities.
  • Consent (where required): for optional communications or features.

3) Sharing your data

We share data with vendors strictly to provide the Service, e.g.:

  • Vending partners (e.g., VTpass) to fulfill purchases.
  • Payment/banking partners to fund your wallet and settle transactions.
  • Messaging/hosting providers (e.g., WhatsApp/Meta, web hosting, analytics limited to operational metrics).
  • Professional advisors and authorities when required by law.
We do not sell your personal information.

4) International transfers

Where data is transferred across borders, we use appropriate safeguards permitted by applicable law (for example, contractual protections and vendor due diligence).

5) Retention

We keep records for as long as necessary to provide the Service, resolve disputes, and meet legal requirements. Typical retention for transaction records is 6–7 years.

6) Security

We use administrative, technical, and organizational measures appropriate to the risks of our processing. No method of transmission or storage is 100% secure.

7) Your rights

Subject to applicable law, you may have rights to access, correct, delete, or restrict processing of your data, and to complain to a supervisory authority. Contact support@mabro.ng.

8) Children

Mabro is not intended for persons under the age of 18. We do not knowingly process children’s data.

9) Changes

We may update this Privacy Policy from time to time. We will update the “Last updated” date and, where appropriate, provide additional notice.

10) Contact

Email: support@mabro.ng