Privacy

Guap converts USDC into a Nigerian bank payout. This explains what is collected while you do that, why, and how long it is kept. It is written to be read, so it is short.

What is collected

When you create a payout, the following is recorded:

• The bank account you are paying into: institution, account number, and the account name the bank returns.
• The amount, the rate you were shown, and the wallet address you paid from.
• Your IP address and the approximate location it resolves to, usually city level.
• Your browser's user agent and language.
• The time of each step, including attempts that were rejected.

No account is created and no password is stored.

Why IP address and location

Fraud prevention and audit. Converting crypto into bank payouts attracts attempts to launder funds or to test stolen bank details, and the patterns that reveal it are things like one address paying into many unrelated accounts, or many rejected attempts from one origin in a short window. Those are only visible if the origin is recorded.

Under the Nigeria Data Protection Act 2023 the lawful basis is legitimate interest in preventing fraud, and compliance with our obligations as a business handling payments.

Analytics

We count page views to see which parts of the service people actually reach. It records the page, the referrer, and coarse details like country and device type.

It sets no cookies, assigns no identifier that follows you, and cannot connect a visit to a payout or to you. There is no advertising, and nothing is shared for marketing.

Who else sees it

• Our settlement partner receives the bank account details and the amount, because they are the party that pays the bank. They do not receive your IP address or location.
• Our routing partner receives your wallet address and the amount when a payment is converted between chains. They do not receive your bank details.
• Our database provider stores the records described above on our behalf.
• Our hosting provider processes page-view analytics, and necessarily sees the IP addresses of requests, as any host does.

Nothing is sold, and nothing is shared for marketing. Records may be disclosed to a bank, a regulator or law enforcement where we are legally required to.

How long it is kept

Payout records and the origin data attached to them are kept for seven years, which is the retention period expected of financial records in Nigeria. Records of rejected attempts that never became a payout are kept for twelve months, which is long enough to be useful against a repeat attempt and no longer.

When a payout fails

A payout that a bank cannot accept is refunded. Where you paid from a wallet we can refund to directly, that happens automatically. Where you paid from a chain that cannot receive the refund, the funds return to an address Guap controls and are sent back to you by hand. That is the only point at which we hold your funds at all, and it only happens when something has already gone wrong.

Your rights

You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Deletion is limited by the retention periods above: a completed payout is a financial record and cannot be erased on request. You can also complain to the Nigeria Data Protection Commission.

Contact

Message @dxFareed on Telegram. That reaches a person directly, which for something this small is faster than a support address that nobody is watching.