Privacy Policy

1. Introduction

This Privacy Policy explains how Mazcom ("Mazcom", "we", "us", "our") collects, uses, shares, and protects your personal data when you use the Mazcom mobile application, the website at mazcom.com.ng, and our calling, wallet, DID, and agent services (the "Services").

We are committed to protecting your privacy and handling your data in line with the Nigeria Data Protection Act 2023 ("NDPA"), the Nigeria Data Protection Regulation ("NDPR"), and other applicable laws. By using the Services you acknowledge this Policy.

2. Information We Collect

We collect the following categories of information:

a) Account and identity information

• Name, email address, phone number, and gender provided at registration.
• Your password (stored in hashed form — we never store it in plain text).
• Account identifiers and settings, including assigned SIP extension and account number.

b) Identity verification (KYC) information

• National Identification Number (NIN).
• Proof-of-address documents you upload.
• Verification status, review notes, and timestamps.

c) Contacts

• With your permission, we access your device contacts so you can find and call people and recognise incoming callers. Contact data is processed on your device and used only to provide these features; you can revoke contact permission in your device settings at any time.

d) Call and communication data

• Call records such as the numbers involved, direction, date, time, duration, and billing details.
• Technical call metadata such as SIP response codes, hangup cause, gateway, and selected route.
• Call recordings, where the recording feature is enabled for your account and permitted by law (see Section 6).
• In-app support chat messages and any files you send to us.

e) Payment and transaction information

• Top-up and purchase records, amounts, references, and status.
• Wallet balances, minutes balances, and transaction history.
• Payment confirmations returned by our payment providers. We do not receive or store your full card number or PIN.

f) Device, usage, and technical information

• Device model, operating system, app version, and language.
• Push-notification token, IP address, and general log data.
• Crash reports and diagnostic information used to keep the Services stable and secure.

g) Website information

• Standard server logs and essential cookies/security tokens required to operate the website and protect against fraud.

3. How We Use Your Information

• To create and manage your account and provide the Services.
• To place, route, and bill calls and to assign and manage DID numbers.
• To process payments, maintain your Wallet and Minutes, and detect fraud or abuse.
• To verify your identity and meet legal, tax, and regulatory obligations.
• To provide customer support and respond to your requests.
• To send service notifications, security alerts, and (where permitted) product updates.
• To monitor, troubleshoot, and improve the Services and ensure network and information security.
• To enforce our Terms of Service and comply with lawful requests from authorities.

4. Lawful Bases for Processing

Under the NDPA we rely on one or more of the following bases: your consent (for example, contacts access and notifications), performance of a contract (to provide the Services you request), legal obligation (for example, KYC, tax, and law-enforcement requirements), and our legitimate interests (such as fraud prevention, security, and service improvement), balanced against your rights.

5. Sharing and Disclosure

We do not sell your personal data. We may share it with:

• Service providers (processors) who help us operate the Services, such as payment processors, push-notification providers, telephony/carrier and routing partners, and cloud hosting providers, under contracts that require them to protect your data.
• Agents who created or fund your account, limited to the information needed to provide that service.
• Legal and regulatory authorities where we are required to do so by law, court order, or a valid request, or to protect our rights, users, or the public.
• Successors in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Call Recordings

Where call recording is enabled, recordings may capture both parties' voices. We process recordings to provide the feature you requested, to resolve disputes, for quality and security purposes, and where required by law. You are responsible for obtaining any consent required in your jurisdiction and for not using recording unlawfully. Recordings are retained only for as long as necessary for these purposes.

7. International Transfers

Some of our service providers may store or process data outside Nigeria. Where we transfer personal data across borders, we take steps to ensure it receives an adequate level of protection consistent with the NDPA, such as contractual safeguards.

8. Data Retention

We keep personal data for as long as your account is active and for as long afterwards as is necessary to meet legal, regulatory, tax, and accounting requirements, to resolve disputes, and to enforce our agreements. When data is no longer needed we delete it or anonymise it. Retention periods vary depending on the type of data and the applicable law.

9. Security

We use technical and organisational measures designed to protect your data, including encryption in transit, hashed passwords, access controls, and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your credentials confidential and notify us of any suspected breach.

10. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you and request a copy;
• Request correction of inaccurate or incomplete data;
• Request deletion of your data, subject to legal retention obligations;
• Object to or request restriction of certain processing;
• Withdraw consent at any time where processing is based on consent (for example, contacts access);
• Request portability of data you provided, where technically feasible;
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise these rights, contact us at support@mazcom.com.ng. Some rights may be limited where we must retain data to comply with law.

11. Cookies and Similar Technologies

Our website uses essential cookies and security tokens to keep you logged in and to protect against fraud. We do not use them to serve third-party advertising. You can control cookies through your browser settings, but disabling essential cookies may affect how the website works.

12. Children's Privacy

The Services are not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

13. Third-Party Links

The Services may contain links to third-party websites or services that we do not control. This Policy does not apply to them, and we are not responsible for their privacy practices. We encourage you to review their policies.

14. Changes to This Policy

We may update this Policy from time to time. When we make material changes we will revise the "Last updated" date and, where appropriate, notify you in the app. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

15. Contact Us

For privacy questions, requests, or complaints, contact our data protection contact at support@mazcom.com.ng or through the in-app support chat. You also have the right to complain to the Nigeria Data Protection Commission.