Privacy Policy
Last updated: 16 Aug 2025
This Privacy Policy describes how Mabro (“we”, “us”) collects, uses, discloses, and safeguards information when you use our WhatsApp bot, websites, and related services (the “Service”).
1) The data we collect
- Identification: WhatsApp number (MSISDN), session IDs, request IDs.
- Profile & wallet: name (if provided), wallet balance and ledger entries, top‑up and spend history.
- Transaction data: service type, amounts, phone/meter/smartcard numbers, product codes, tokens, and receipts.
- Technical: logs (timestamps, status codes), device/network metadata provided by WhatsApp/hosting, and basic cookies on our web pages (see Cookies).
- Support: messages you send to support channels.
2) Why we process your data (lawful bases)
- Contract: to create your wallet, process orders, deliver tokens/receipts, and handle refunds or reversals.
- Legitimate interests: to secure the Service, prevent fraud, improve reliability, and provide customer support.
- Legal obligations: to keep records required by law and comply with requests from competent authorities.
- Consent (where required): for optional communications or features.
3) Sharing your data
We share data with vendors strictly to provide the Service, e.g.:
- Vending partners (e.g., VTpass) to fulfill purchases.
- Payment/banking partners to fund your wallet and settle transactions.
- Messaging/hosting providers (e.g., WhatsApp/Meta, web hosting, analytics limited to operational metrics).
- Professional advisors and authorities when required by law.
4) International transfers
Where data is transferred across borders, we use appropriate safeguards permitted by applicable law (for example, contractual protections and vendor due diligence).
5) Retention
We keep records for as long as necessary to provide the Service, resolve disputes, and meet legal requirements. Typical retention for transaction records is 6–7 years.
6) Security
We use administrative, technical, and organizational measures appropriate to the risks of our processing. No method of transmission or storage is 100% secure.
7) Your rights
Subject to applicable law, you may have rights to access, correct, delete, or restrict processing of your data, and to complain to a supervisory authority. Contact support@mabro.ng.
8) Children
Mabro is not intended for persons under the age of 18. We do not knowingly process children’s data.
9) Changes
We may update this Privacy Policy from time to time. We will update the “Last updated” date and, where appropriate, provide additional notice.
10) Contact
Email: support@mabro.ng