Privacy Policy
Effective 14 August 2026 · Lagos, NigeriaShort version: we collect what a money trust needs, we guard it, other users see almost none of it — and if you use Treu for crime, we will hand every byte of it to the authorities, fast.
1. What we collect
Identity: legal name, date of birth, gender, residential address, NIN, BVN, government ID documents, proof of address, selfies and biometric face/liveness data, source-of-funds information at Tier 3. Contact: phone number (verified by code), email from your sign-in provider. Financial: your settlement bank account, payment methods used to lock, and the full transaction history of your contracts. Deal content: contract terms, photos and evidence, tracking data, correspondence written on the record, dispute filings. Technical: device identifiers, app version, IP address, and usage logs. Location: only with your consent, for fraud prevention and meet-in-person deal features — you can switch it off. Support: your messages and calls with our support team, kept so complaints can be resolved and reviewed.
2. Why we collect it
To verify who you are (the law and the product both require it); to run your contracts — locking, settling, refunding, executing clauses; to referee disputes, which means reading the record; to send the texts the product runs on (deadlines, locks, releases); to prevent fraud and money laundering; to meet our legal duties under Nigerian law, including the NDPA 2023, AML/CFT regulations, and CBN rules; and to improve the service. Fraud screening is partly automated: transactions are scored by systems that flag suspicious patterns, and any decision that hurts you (a freeze, a decline) is reviewable by a human on request. We do not sell your data. We do not run advertising on it.
3. What other people see
Your counterparty sees the contract you both signed and everything on its record — that is what a contract is. They never see your identity documents, your phone number, or your bank details. The public sees your trader profile: your first name and initial, your aggregate conduct (kept, settled, disputes lost), and a "✓ verified" mark — never your tier, documents, or numbers. Lenders on a bond see the pool, the available amount, and the claims register — not your papers.
4. Biometrics
Face checks and liveness scans exist to prove you are you. They are stored encrypted, used for verification and fraud prevention only, never displayed on any contract, and never shared with counterparties. Where verification runs through a licensed partner, their processing is governed by our data-processing agreement with them.
5. Who we share with
Payment partners and banks, to lock, settle, and refund. Identity registries and licensed verification partners (including NIMC/BVN channels), to verify you. Messaging providers, to deliver SMS and WhatsApp notices. Professional advisers and auditors, under confidentiality. A buyer or acquirer, if Treu is ever sold — your protections travel with the data. And the authorities, below.
6. Disclosure to government and law enforcement — the plain version
When crime, fraud, money laundering, terrorism financing, or other unlawful activity is observed, suspected, or lawfully alleged, we disclose fast and fully. We will give law enforcement, regulators, the courts, and competent agencies (including the EFCC, NFIU, Nigeria Police, and CBN) any information we hold — identity records, biometrics, contracts, ledgers, correspondence, device and usage data — upon lawful request or court order, and proactively where we file suspicious-activity reports or reasonably believe disclosure will prevent or expose crime. We will not warn you first where the law forbids tipping-off — and where warning is optional, assume we won't. Honest traders never meet this clause; it exists so that criminals can be certain they will.
7. How long we keep it
Contract records are permanent — they are the product, and both parties rely on them for as long as claims can exist. Identity and transaction records are kept at least as long as Nigerian financial-record laws require (typically five years after your last transaction or account closure, longer where an investigation or dispute is open). Biometric verification data is kept while your account is verified and for the legally required period after.
8. Security
Encryption in transit and at rest, access on a need-to-know basis, logged and reviewed; biometric data segregated; payment credentials held by our regulated partners, not on our servers. No system is perfect: if a breach ever puts you at risk, we will notify you and the Nigeria Data Protection Commission as the NDPA requires.
9. Your rights
Under the NDPA you may access the data we hold on you, correct what is wrong, and object to or restrict certain processing. Two honest limits: you cannot delete a contract record (it belongs to the deal and to the other party too), and you cannot delete what the law obliges us to keep. Where deletion is lawful — for example an account that never traded — we will honour it. Write to us; we answer within the statutory time.
10. Your choices: what you can switch off
Service messages (deadlines, locks, releases, case notices) cannot be switched off while you have live contracts — the product runs on them. Marketing, if any, is opt-out at any time. Location is opt-in and revocable in your device settings. Consent you gave for optional processing can be withdrawn whenever you like; processing the law requires (identity, AML records) continues regardless, because it must.
11. Children
Treu is for adults, 18 and above. We do not knowingly collect children's data; verified age is part of onboarding.
12. Where data lives
Data is processed in Nigeria and may be processed by vetted providers abroad under NDPA-compliant safeguards. Wherever it sits, this policy follows it.
13. Cookies and the website
This website uses no tracking cookies. We count visits with our own cookieless analytics — the page viewed, where you came from, and a coarse screen size; no identifier is stored and nothing is shared or sold. Fonts load from Google Fonts; your browser makes that request directly.
14. Changes and contact
Material changes reach you by text or in-app notice before they take effect. Questions and rights requests: support@treu.ng · Data Protection Officer, Treu, 14 Adeola Odeku Street, Victoria Island, Lagos, Nigeria.
— END · SIGNED IN BIRO —