Privacy Policy

Last updated: March 2, 2026

1. Introduction

BillsGPT ("we", "our", "us") is an AI-powered bill payment platform operated by Azone Tech. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform (collectively, the "Service").

By using BillsGPT, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

  • Account Information: First name, last name, email address, phone number
  • Authentication Data: Encrypted password, transaction PIN (hashed)
  • Financial Information: Wallet balance, transaction history, virtual account details
  • Bill Payment Data: Phone numbers, meter numbers, smart card numbers, bank accounts used for bill payments

2.2 Automatically Collected Information

  • Device Information: Device type, operating system, unique device identifiers
  • Usage Data: Features accessed, transaction frequency, app interaction patterns
  • Biometric Data: Used locally on your device for authentication only — never transmitted to our servers

3. How We Use Your Information

  • Process bill payments (airtime, data, bank transfers, cable TV, electricity)
  • Maintain your wallet and transaction records
  • Provide AI-powered chat assistance for bill payments
  • Verify your identity and prevent fraud
  • Send transaction confirmations and receipts
  • Improve our services and user experience
  • Comply with legal and regulatory requirements

4. Data Sharing

We share your data only with:

  • Payment Processors: UnityBills API and PayVessel for processing transactions
  • AI Providers: Anonymized conversation data with OpenAI/Anthropic to power the chat assistant
  • Banking Partners: For virtual account creation and fund transfers
  • Legal Authorities: When required by law or to protect our rights

We never sell your personal information to third parties.

5. Data Security

  • All data transmitted via HTTPS/TLS encryption
  • Passwords are hashed using bcrypt
  • Transaction PINs are securely hashed
  • API keys are encrypted at rest using AES-256
  • Authentication tokens are stored in secure device storage
  • Biometric data is processed locally on your device only

6. Data Retention

We retain your personal data for as long as your account is active. Transaction records are kept for a minimum of 6 years as required by Nigerian financial regulations. You may request deletion of your account and associated data at any time through the app settings.

7. Your Rights

  • Access: Request a copy of your personal data
  • Correction: Update inaccurate information via your profile
  • Deletion: Delete your account and all associated data
  • Portability: Export your transaction history
  • Withdrawal: Withdraw consent for optional data processing

8. Children's Privacy

BillsGPT is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us: