Privacy Policy

Who we are

MY RMB AGENT LIMITED (“MY RMB AGENT”, “we”) operates the website www.myrmbagent.com, the web app at app.myrmbagent.com and the MY RMB AGENT Android app. We are based in Lagos, Nigeria. For privacy questions or requests, email support@myrmbagent.com.

Information we collect

Account details you provide when you register and use the service: your name, email address, phone and WhatsApp numbers, password (stored only as a secure hash by our authentication provider) and marketing preferences.

Identity verification: when you verify your identity we send your BVN or NIN to our banking partner to confirm it. We do not store the BVN or NIN number itself; we keep the verification result, your verified legal name, a masked identifier and a keyed fingerprint used to stop the same identity being used on multiple accounts.

Transaction information: wallet funding and balances, payment references, rates applied, RMB orders, the recipient details you enter (for example Alipay or WeChat account names, QR codes and Chinese bank details), receipts you upload, procurement requests, delivery addresses and shipment records.

Technical and security data: device and browser information, IP address, sign-in events and error diagnostics used to keep accounts secure and the service working.

On the Android app, your optional six-digit PIN and biometric unlock never leave your phone; they are protected by the Android Keystore and are not sent to us.

How we use your information

We use your information to create and manage your account, process and deliver transactions, verify identity and payments, prevent fraud and misuse, provide support, send service messages about your account and transactions, send marketing only if you opt in, and improve and secure our services.

Account and verification data

Verification information, including identity or business documents, is used to confirm who we are dealing with and to meet our compliance obligations. It is not used for marketing.

Transaction information

We keep records of transactions carried out through the platform, including amounts, rates applied, payment references and recipient details, so we can process payments, resolve disputes and meet record-keeping obligations.

Cookies and technical data

We use cookies and similar technology to keep you signed in, remember preferences and understand how the site is used. We also record technical data such as device and browser information for security purposes.

Advertising and measurement

We use Meta Pixel and TikTok Pixel on our public website pages and on the home and service-information pages of our app to measure visits and engagement. They are not loaded for reporting on account, order, sign-in or admin pages. When a payment has been independently verified, our server may report a “Purchase” event to Meta containing only a hashed (irreversible) customer identifier, with the value set to zero, for advertising measurement. These services may use browser identifiers. We do not send identity-verification data, bank account or recipient details, email addresses, phone numbers or transaction amounts to these advertising tools. You can manage advertising tracking through your browser and the advertising platforms’ privacy settings.

Information sharing

We share information only where needed to deliver our services, and with service providers who support our platform under confidentiality obligations. We do not sell your personal data. Our providers are:

• Safe Haven Microfinance Bank — identity (BVN/NIN) verification, dedicated funding accounts and payment processing. • Paystack — wallet funding payments. • Supabase — database, authentication and file storage. • Vercel — website and app hosting. • Resend — transactional and account emails. • Twilio and Sendchamp — SMS and WhatsApp verification codes. • HIOBUY — placing marketplace orders with 1688 and Taobao sellers when you buy through our procurement service. • Our logistics partners — delivery and shipment details for orders you ask us to ship. • Meta and TikTok — advertising measurement as described above.

Payment recipients and suppliers in China receive the payment details needed to complete the transfer you request.

Where your data is stored

Our database and authentication services are hosted by Supabase in the United Kingdom (London), and our website and app are served by Vercel’s global network. Some providers listed above process data in other countries. Where data leaves Nigeria we rely on our providers’ contractual and security commitments to protect it.

Security

We apply access controls, encryption in transit and internal restrictions to protect your information. No system can be guaranteed completely secure, so please keep your login details private.

Data retention

We keep your information while your account is active. Records of transactions, identity verification and our security and audit logs are kept for at least five years after your account is closed or the transaction is completed, as required by the Money Laundering (Prevention and Prohibition) Act 2022, and are then deleted.

Marketing preferences and other personal data that we are not legally required to keep are deleted or anonymised when your account is deleted. The content of emails we have sent you is cleared from our systems 30 days after sending.

Deactivating or deleting your account

Deactivate: in the app go to Profile → Deactivate account and confirm with your password. You are signed out on every device and your account is paused, not deleted. Sign in at any time and choose Reactivate account to continue.

Delete: in the app go to Profile → Delete account, or visit www.myrmbagent.com/delete-account from any browser without the app. After confirming your password you receive a request reference by email, your account is deactivated immediately, and we complete the deletion within 30 days once anything still owed in either direction is settled (for example a wallet balance, a refund, an unconfirmed payment, an open order, procurement, shipment or bill payment, or an open dispute). Your sign-in identity, profile, contact details, saved recipients, saved suppliers, addresses and notifications are then erased or anonymised; the financial and verification records described under Data retention are kept for the legal period.

Your rights

Under the Nigeria Data Protection Act 2023 you may ask for access to the personal information we hold about you, ask for corrections, object to certain uses, withdraw consent for marketing at any time, and ask us to delete information we are not required to keep. Email support@myrmbagent.com to make a request. You may also complain to the Nigeria Data Protection Commission.

Children

MY RMB AGENT is intended for adults aged 18 and over. We do not knowingly open accounts for children.

Legal and compliance disclosures

We may disclose information where we are legally required to do so, or where necessary to investigate fraud, misuse or unlawful activity.

Policy updates

We may update this policy from time to time. The version published on this page is the current version.

Contact information

Email support@myrmbagent.com, use the Contact page, or message our WhatsApp Support channel, which is available 24/7.