Privacy Policy

Last updated: 13 October 2026

This policy explains how BreachZero Limited ("BreachZero", "we", "us"), a company registered with the Corporate Affairs Commission of Nigeria (RC 8546359), collects and uses personal information through our website and services, including Simbi AI, our WhatsApp bill-payment assistant.

1. Information we collect

• Website enquiries: your name, email address and message when you use our contact form.
• WhatsApp details: your phone number and WhatsApp profile name, which WhatsApp shares with us when you message Simbi AI.
• Messages: the messages and button selections you send to Simbi AI.
• Bill details: information needed to complete a payment, such as meter numbers, smartcard/IUC numbers, customer or account numbers, biller names and amounts.
• Transaction records: payment references, dates, amounts, status, and tokens or receipts returned by billers.
• Payment information: card and bank payments are processed by our payment partner, Flutterwave. We do not store your full card number or CVV. If you choose to save a card, we store only a token issued by Flutterwave that lets us charge that card at your request.

2. How we use your information

• To respond to your enquiries and requests.
• To process bill payments and deliver tokens, receipts and confirmations.
• To keep a record of your transactions and help resolve failed or disputed payments.
• To prevent fraud and keep our services secure.
• To improve our services.

We do not sell your personal information, and we do not send you marketing messages unless you have agreed to receive them.

3. Who we share it with

We share information only as needed to provide our services:

• Meta / WhatsApp, which delivers messages between you and Simbi AI.
• Flutterwave, which processes card, bank transfer and USSD payments.
• Billers and bill-payment providers, which receive the details needed to credit your account (for example, your meter number and amount).
• AI service providers (such as Groq), which process the text of your messages to help us understand what you are asking for.
• Authorities, where we are required to by law.

4. How long we keep it

We keep transaction records for as long as required by applicable financial and tax regulations. Other information, such as conversation history and enquiries, is kept only as long as needed and is then deleted. Saved card tokens are kept until you remove them or ask us to delete your data.

5. How we protect it

We use encryption in transit, access controls and signed requests with our partners to protect your information. No system is completely secure, but we take reasonable steps to keep your data safe.

6. Your rights

Under the Nigeria Data Protection Act 2023 and other applicable laws, you can ask to:

• access the personal information we hold about you;
• correct information that is wrong;
• delete your information and any saved cards;
• withdraw consent or object to certain uses.

To make a request, email us at info@breachzero.net. You can stop using Simbi AI at any time by no longer messaging it.

7. Children

Our services are not intended for anyone under 18, and we do not knowingly collect their information.

8. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated.

9. Contact us

BreachZero Limited (RC 8546359)
Nigeria
Email: info@breachzero.net
Phone: +234 814 918 2282