Roja App · Legal & Privacy
Privacy Policy
This Privacy Policy explains how Roja Technologies Incorporated (EIN 38-4363777) operating as Roja Technologies Limited (RC 8656145) (collectively, “Roja,” “we,” “our,” or “us”) collect, use, share, and protect user personal information on the Roja mobile application and related services.
Information We Collect
We collect the following categories of data:
1. Identification Data
Name, date of birth, BVN, NIN, address, phone number, and email.
2. Biometric Data
Facial verification images, live selfies, and ID matches.
3. Financial Data
Bank account information, transaction records, income, and repayment history.
4. Device and Usage Data
IP address, device type, app usage statistics.
Purpose of Data Collection
We collect and process user data for:
- 1. Identity verification (KYC and AML compliance).
- 2. Loan eligibility assessment and risk profiling.
- 3. Transaction processing and escrow management.
- 4. Communication and service updates.
- 5. Fraud detection and prevention.
- 6. Legal and regulatory compliance with the CBN and NITDA (NDPA 2023).
Data Sharing and Disclosure
This data may be shared only with the following categories of parties:
1. Licensed Nigerian Deposit Money Banks
For escrow and direct debit processing.
2. Authorized Insurance Service Providers
For credit protection coverage.
3. Verified Identity Verification Providers
For BVN, NIN, and biometric checks.
4. Law Enforcement & Regulatory Agencies
Where required by law.
Roja does not sell or rent user data to third parties.
Data Retention
We retain user data for as long as necessary to fulfill the purpose of collection or as required by law (5 years post-account closure). Data is securely deleted or anonymized thereafter.
Security Measures
We implement industry-standard security protocols, including encryption, multi-factor authentication, and access controls, to safeguard personal data against unauthorized access, alteration, or disclosure.
User Rights
Under the Nigeria Data Protection Act, users have the right to:
- 1. Access, correct, or update your personal data.
- 2. Withdraw consent or request deletion of your data.
- 3. Request portability of your data.
- 4. Lodge a complaint with NITDA if you believe your data rights have been violated.
Requests can be made by contacting compliance@getroja.com
International Transfers
Roja does not transfer user data outside Nigeria. All data is processed and stored on secure Nigerian servers and CBN-approved cloud infrastructure.
Changes to This Policy
Roja reserves the right to amend this Privacy Policy from time to time. Users will be notified of material changes via email or in-app alerts.
Contact Information
For all data protection inquiries: Legal & Compliance Officer
