Privacy Policy

PayTraka (“PayTraka”, “we”, “us”) provides an online platform that helps Nigerian businesses create, manage and send e-invoices, credit and debit notes and receipts, and, where a business chooses, transmit them to the Nigeria Revenue Service (NRS) e-invoicing system. Our address is 2 Adaranijo Street, opposite Pedro Police Station, Palmgroove, Lagos, Nigeria.

This policy explains how we collect and use personal data when you visit our website, create an account, or use the PayTraka customer app, Agent panel or related services. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and regulations issued by the Nigeria Data Protection Commission (NDPC).

Your account data. For information about you and your business as our customer (for example your name, email, phone number and company details), PayTraka decides how it is used and is the data controller.

Your business records. For the information you put into PayTraka about your own customers, suppliers and transactions (for example customer names, TINs, addresses and invoice details), your business is the data controller and PayTraka processes that data on your behalf and on your instructions. You are responsible for having a lawful basis to share it with us.

• Account and user data: names, email addresses, phone numbers, job role in PayTraka, branch access, and a securely hashed password. We never store your password in readable form.
• Company data: company and trading names, registration (RC/BN) number, Tax Identification Number (TIN), VAT details, addresses, bank details shown on invoices, logo and branch details.
• NRS integration details: the business ID, service ID, API keys and related credentials you provide so we can transmit invoices to NRS for you. Sensitive credentials are stored encrypted and are visible only to your company's owner and administrators.
• Business records you enter or import: customers, suppliers, products and services, invoices, credit and debit notes, receipts and payments, including contact details and TINs of the people and businesses you trade with.
• Documents you upload: invoice files (for example PDF or spreadsheet files) that you ask us to read and convert into invoices.
• Data from systems you connect: if you connect an accounting system such as ERPNext or Sage, the invoices and related records we fetch from it on your instruction.
• Support and communications: messages you send to our support team, and your email preferences.
• Billing data: your subscription plan and payment records. Card payments are handled by our payment provider; we do not receive or store your full card details.
• Technical and usage data: IP address, browser and device information, sign-in times, pages used and activity logs that help us keep the service secure and working.

• To provide the service you signed up for (performance of a contract): running your account, creating and storing your documents, emailing invoices and receipts to your customers when you or your settings ask us to, and connecting to the systems you choose.
• To transmit invoices to NRS when you submit them (performance of a contract, and to help you meet your legal obligations under Nigerian tax law).
• To keep records required by law (legal obligation), including tax and accounting records.
• To secure and improve PayTraka (legitimate interests): preventing fraud and misuse, fixing problems, understanding how the service is used, and developing new features.
• To communicate with you: service messages and announcements about your account (contract and legitimate interests), and news or offers by email, which you can opt out of at any time using the unsubscribe link (legitimate interests or consent).
• To bill you for your subscription (contract).

We do not sell personal data.

We share personal data only as needed to run PayTraka, and with providers who are bound to protect it:

• The Nigeria Revenue Service (NRS) and our e-invoicing access and integration partners, when you validate or submit invoices.
• Your own customers, when you send them an invoice, credit note or receipt through PayTraka.
• Your PayTraka agent, if your account was opened or is managed by an authorised PayTraka agent, who can see your company's account and subscription details in order to support you.
• Service providers that host our servers, store files (for example Cloudflare), deliver email, process payments (for example Paystack), provide website analytics (Google Analytics), and, when you use our document reader, an AI service that extracts invoice details from the files you upload.
• Systems you connect, such as ERPNext or Sage, to fetch the records you ask us to import.
• Authorities and advisers, where the law requires it or to protect our rights, and professional advisers under a duty of confidentiality.
• A successor business, if PayTraka is reorganised, merged or sold, subject to this policy.

Some of our service providers may process data outside Nigeria. Where this happens we take the steps required by the NDPA, such as relying on adequate data protection laws in the destination country or contractual safeguards with the provider.

We keep account data while your account is active. Invoices, receipts and other tax and accounting records are kept for as long as Nigerian tax and accounting laws require (generally at least six years), even if your account is closed. Other data is deleted or anonymised when it is no longer needed for the purposes above.

If you close your account, you can ask us for an export of your records first.

We use encrypted connections (HTTPS), encryption of sensitive credentials, hashed passwords, role-based access controls with branch restrictions, activity logs and regular backups. No system is perfectly secure; if a personal data breach is likely to put you at risk, we will notify you and the NDPC as the law requires.

Under the NDPA you have the right to be informed; to access your personal data; to have it corrected or deleted; to restrict or object to its processing; to data portability; to withdraw consent at any time (where we rely on consent); and not to be subject to a decision based solely on automated processing that significantly affects you.

To use these rights, email support@paytraka.com. We may need to confirm your identity. For records your business controls about its own customers, we will pass your request to that business. You can also complain to the Nigeria Data Protection Commission (NDPC).

We use essential cookies to keep you signed in and secure your session; PayTraka does not work without them. Our public website also uses Google Analytics cookies to understand how visitors use it. You can block or delete cookies in your browser settings; blocking essential cookies will stop you from signing in.

PayTraka is a business service and is not intended for anyone under 18. We do not knowingly collect personal data from children.

We may update this policy from time to time. We will post the new version here with a new “Last updated” date and, for significant changes, tell you in the app or by email.

Questions or requests about privacy: support@paytraka.com, or write to PayTraka, 2 Adaranijo Street, opposite Pedro Police Station, Palmgroove, Lagos, Nigeria. Phone: 0812 629 0758.