Privacy Policy

2. The Data We Collect

To provide you with seamless borderless utility vending, we must collect specific data points. We classify this into two categories:

A. On-Chain & Web3 Data

• Public Wallet Addresses: We collect your Base, Celo, or other EVM public wallet addresses to facilitate stablecoin escrow and transaction tracking.
• Transaction Hashes: Public blockchain metadata confirming your payment.
• Strict Self-Custody Guarantee: AbaPay NEVER collects, stores, or requests access to your private keys, seed phrases, or wallet passwords.

B. Utility & Fiat Data

• Utility Identifiers: Local and international phone numbers, Smartcard numbers, Meter numbers, and Bank Account numbers you provide for vending.
• Verified KYC Data: When you verify an account, our API may retrieve the associated Customer Name, physical meter address, and Account Type from the relevant national or international grid/banking network to ensure you are paying the correct bill.
• Contact Information: Email addresses optionally provided for transaction receipts or support tickets.

C. DeAI Agent & Messaging Data

• Messaging Platform Identifiers: Your Telegram Chat ID, WhatsApp phone number, or X User ID, linked to your wallet address so the agent can recognize you across conversations.
• Chat Message Content: Messages you send to the DeAI agent are processed to determine your intent (e.g. "top up my phone with 500 naira") — including by our AI provider, Anthropic (Claude API). We do not use this content for advertising or sell it to third parties.
• Hashed Transaction PIN: Your DeAI transaction PIN is stored as a salted cryptographic hash — never in plaintext. AbaPay staff cannot view your actual PIN.
• On-Chain Allowance Data: The stablecoin, blockchain, and spending limit you've approved for the agent — this is public on-chain data, visible to anyone who inspects the blockchain, not private data we control.

3. How We Use Your Data

We strictly use your data for the following purposes:

• Service Execution: To route your payment accurately to the specified domestic or international DisCo, Telco, or Bank.
• Transaction History: To maintain an encrypted ledger so you can track your past cross-border payments and request refunds if a network fails.
• Fraud Prevention & AML: To monitor for duplicate transactions, prevent API abuse, and comply with global Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) directives.

4. Third-Party & Cross-Border Data Sharing

AbaPay is a global aggregator interface. To successfully vend your utility, we must securely share your Utility Identifiers (Phone/Meter numbers) with licensed domestic and international third parties.

• Utility Aggregators: We share necessary vending data with our API partners (e.g., VTpass Global) strictly for the purpose of executing your transaction across borders.
• Bank Transfer Partner: For the Transfer feature, we share the destination account number (and, once verified, the account holder's name) with Monnify — Moniepoint Inc.'s API — strictly to identify the receiving bank and execute the payout from our Moniepoint business account.
• Blockchain Networks: Your public wallet address and transaction amount are permanently broadcasted to the public, immutable Base or Celo blockchains.
• AI Processing Partner: Chat messages sent to the DeAI agent are transmitted to Anthropic (Claude API) solely to interpret your request. Anthropic never receives your private keys, PIN, or any ability to sign transactions.
• Messaging Platforms: To operate the agent, we exchange data with Telegram, Meta (WhatsApp), and X's respective bot/webhook infrastructure.
• Law Enforcement: If compelled by a valid subpoena or directive from relevant local or international law enforcement (e.g., EFCC, SEC, or FATF-aligned agencies), we may disclose metadata to prevent cross-border financial crimes.

5. Data Security & Retention

Your transaction metadata and utility identifiers are stored securely on encrypted cloud servers. We implement strict access controls and API rate limiting to protect our database from unauthorized access, regardless of your geographical location.

Retention: We retain your transaction history for a minimum of five (5) years as required by international financial compliance regulations, after which it may be anonymized or securely deleted.

7. Contact Our Data Protection Officer (DPO)

If you have any questions, complaints, or require clarification regarding how MASONODE TECHNOLOGIES LIMITED handles your international data, please contact our support team and Data Protection Officer at: