Privacy · KoreX

In short

We collect what it takes to open an account and move money: your number, your identity details and the instructions you give.
Photos, voice notes and messages are used to carry out what you asked. We do not sell data, and it funds no advertising.
Your identity details go to KoreX's licensed partner, which the law requires to check them.
Payment records are kept for as long as Nigerian law requires, and everything else no longer than we need it.
You can see, correct or delete your data, and complain to the Nigeria Data Protection Commission.

This summary helps you find your way. The sections below are what actually applies.

1Who is responsible for your data

Legal entity name and RC number (“KoreX”, “we”) is the data controller for the information described here. Our Data Protection Officer is DPO name, and you can reach them at DPO email. NDPC registration status

Our licensed partner, Partner name, is separately responsible for the information it needs to open and run accounts and to meet its own legal duties, and has its own privacy notice.

This policy covers personal and business accounts on every channel, and the people our customers pay or collect from. It applies alongside our Terms.

2What we collect

To open and run your account

your phone number, which is how KoreX identifies you on every channel;
your name as your bank holds it, and your Bank Verification Number (BVN);
a photo of your ID, if our partner asks for one for the limits you want;
for a business, its registration details and the staff you add;
an email address, only if you choose to log in by email.

What you send KoreX

the messages you type, on any channel;
voice notes and calls, and the transcripts made from them;
photographs you send, such as handwritten account numbers, receipts, invoices and screenshots;
spreadsheets and lists you upload, for example for payroll.

About your payments

amounts, dates, references and the status of each payment;
the name, account number and bank of the people you pay or who pay you.

Security and service

your PIN, which we keep only in a form that cannot be turned back into the four digits;
one-time codes, which expire after five minutes;
session and device details, IP addresses and service logs, used to keep the account secure;
which channels you tend to answer on, so messages reach you on one that works.

3Information about other people

Using KoreX involves other people’s details: the people you send money to, and for a business, the customers it collects from, the people who buy its tickets and the staff it pays.

When a business asks KoreX to collect from its customers, the business decides who is contacted, and KoreX handles those details on its behalf. Anyone contacted this way can reply STOP to be removed from every channel, and can use the rights below.

If you give us someone else’s details, you must be entitled to share them for that purpose.

4How we use it, and on what basis

The Nigeria Data Protection Act 2023 only allows us to use personal data where there is a lawful basis. These are ours:

Opening your account and carrying out your instructionsContract

Including reading your photos and voice notes, because that is the instruction you gave.

Checking identity, preventing money laundering, keeping recordsLegal obligation

Required of us and of our partner by Nigerian financial law.

Detecting fraud and keeping accounts secureLegitimate interests

Protecting you, the people you pay, and the service.

Contacting a business's customers about money they oweLegitimate interests

The business’s interest in being paid, limited by the STOP rule.

Tips and product newsConsent

Only if you agree, and you can withdraw at any time by replying STOP.

We do not sell your data, and it does not fund advertising. Whether content may be used to improve KoreX’s own reading, and on what basis

5Automated decisions

Reading a photo or a voice note is automated, but it never moves money on its own: KoreX shows you what it read and you confirm it with your PIN.

Fraud checks are also automated and can pause or block a payment. If that happens you can ask for a person to review the decision, explain your side, and challenge the outcome.

7Transfers outside Nigeria

Some of the providers above, including WhatsApp and our hosting providers, may process data outside Nigeria. When they do, we only use transfers the Nigeria Data Protection Act 2023 allows, such as to countries with adequate protection or under contractual safeguards. Countries and safeguards used

8How long we keep it

Identity and payment records: for as long as your account is open and for at least five years after it closes, as Nigerian anti-money-laundering law requires.
Messages, voice notes, transcripts and photos: Retention period, unless they form part of a payment record or a complaint.
One-time codes: five minutes.
Consent to tips and news: until you withdraw it.

When we no longer need information, we delete it or make it anonymous.

9Your rights

Under the Nigeria Data Protection Act 2023 you can ask us to:

tell you what data we hold about you and give you a copy;
correct data that is wrong or incomplete;
delete your data, where we are not required by law to keep it;
restrict how we use it, or stop using it where we rely on legitimate interests;
give you your data in a format you can take elsewhere;
withdraw consent you have given, at any time;
have a person review a decision made solely by automated means.

Ask in the thread you use with KoreX, or write to DPO email. We may need to confirm it is you first. We will not charge you, and we will reply within Response period.

If you are unhappy with how we have handled your data, you can complain to the Nigeria Data Protection Commission.

10Keeping it secure

Data is encrypted in transit and at rest, including the images you send and transcripts of what you say. Every payment needs your PIN, one-time codes expire after five minutes, and access inside KoreX is limited to the people who need it.

If a breach puts your data at risk, we will report it to the Nigeria Data Protection Commission within 72 hours, and tell you without delay if it is likely to put you at high risk, with what we know and what you can do.

11Children

KoreX accounts are for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has opened an account, tell us and we will close it.

12On this website

This site uses no advertising or analytics trackers. It stores only:

korex_lang (cookie, one year): the language you chose, so the site opens in it next time.
Session cookie (while you are logged in): keeps you logged in to the console.
korex-theme (stored in your browser): light or dark.
korex-onboarding (stored in your browser): how far you got through sign-up, so a refresh does not lose your place.

All of these are needed for the site to work as you asked, and you can clear them in your browser settings at any time.

13Changes and contact

If we change this policy in a way that matters, we will tell you on the channel you use before the change takes effect. The date at the top of this page shows when it last changed. Questions about your data go to our Data Protection Officer at DPO email.

Privacy policy