Welcome to Poriume, a bills payment platform owned and operated by Poriume IT Services (BN 3611776), a registered business in the Federal Republic of Nigeria.
At Poriume, we are committed to protecting your privacy and ensuring that your personal information is handled responsibly, transparently, and in compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and other applicable Nigerian laws.
This Privacy Policy explains what data we collect, why we collect it, how we use it, who we share it with, and the rights you have over your information. By using our platform, you confirm that you have read and understood this Policy.
Who This Policy Applies To
This Policy applies to all users of the Poriume mobile application, website (poriume.com), and all associated services including resellers, agents, and vendors.
Section 02
Information We Collect
We collect only the minimum information necessary to provide and improve our services. The data we collect falls into the following categories:
Account Registration Data:
Full name (first and last name)
Phone number (used as your account identifier)
Email address (optional but recommended for account recovery)
State of residence
Password (stored as a one-way cryptographic hash — never in plain text)
Transaction Data:
Wallet funding and deduction records
Service purchase history (airtime, data, electricity, cable TV, etc.)
Transaction reference numbers and timestamps
KYC (Know Your Customer) Data:
BVN (Bank Verification Number) — see Section 3 for important details
NIN (National Identification Number) — see Section 3 for important details
Date of birth (associated with KYC verification)
Technical Data:
Device information and browser type (for security and fraud prevention)
Session login tokens
IP address (for security monitoring)
Section 03
BVN & NIN — Your Identity Data
We Do NOT Store or Access Your BVN / NIN
Poriume does not store your BVN or NIN on our servers, and we do not have access to them after they are submitted. Your BVN/NIN is used only to generate your virtual account number through our licensed banking partner, as required by the Central Bank of Nigeria (CBN). Once transmitted securely to our banking partner, these details are not retained by Poriume.
Why is BVN/NIN required?
The Central Bank of Nigeria (CBN) mandates that all virtual bank accounts linked to digital finance platforms must be tied to a verified BVN or NIN. This is a regulatory requirement — not a choice — intended to prevent financial fraud and money laundering in Nigeria.
What happens to your BVN/NIN?
Your BVN or NIN is encrypted in transit using industry-standard TLS/HTTPS encryption.
It is transmitted directly to our licensed banking partner — 9Payment Service Bank (powered by PayVessel) — who processes it under CBN licensing.
Poriume does not log, display, store, or process your BVN/NIN beyond the point of transmission.
Your BVN/NIN is never shared with any third party other than the banking partner as described above.
Your Identity is Protected
Your BVN/NIN is your most sensitive financial identity. Poriume treats it accordingly — we only pass it through, never store it. If you have any concerns, please contact us at [email protected].
Section 04
How We Use Your Information
We use the information we collect for the following purposes:
Account creation and management — to register and manage your Poriume account.
Service delivery — to process and deliver airtime, data, electricity tokens, cable TV subscriptions, and other services you purchase.
Wallet & payments — to fund your wallet, track balances, and process transactions.
Security & fraud prevention — to detect and prevent unauthorised access, fraud, and abuse of our platform.
Customer support — to respond to your enquiries and resolve issues.
Notifications — to send you important account updates, transaction confirmations, and service alerts via email or in-app.
Compliance — to comply with applicable Nigerian laws, CBN regulations, NDPR, FIRS requirements, and other legal obligations.
Platform improvement — to analyse usage patterns (in aggregate, not individually) and improve our services.
We do not use your personal data for unsolicited marketing to third parties. We do not sell your data.
Section 05
Virtual Account Generation
Poriume provides each verified user with a dedicated virtual bank account issued by 9Payment Service Bank through our integration with PayVessel, a licensed payment service provider in Nigeria.
To generate your virtual account, the following information is shared with 9Payment Service Bank / PayVessel:
Full name, email address, and phone number
BVN or NIN (as described in Section 3 above — transmitted directly, not stored by Poriume)
9Payment Service Bank and PayVessel are independently licensed by the CBN and operate under their own privacy and data protection frameworks. Funds deposited into your virtual account are processed through their infrastructure and credited to your Poriume wallet.
Virtual Account Funding
Your virtual account number is unique to you. Any bank transfer to it will automatically credit your Poriume wallet. Poriume holds no fiduciary or banking licence — your wallet balance represents service credits, not bank deposits.
Section 06
Data Protection & Security
We implement robust technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or disclosure:
Encryption in transit — All data transmitted between your device and our servers is encrypted via HTTPS/TLS.
Password hashing — Passwords are never stored in plain text; we use cryptographic hashing.
Transaction PIN — An optional 4-digit PIN provides an additional layer of security for transactions.
Session management — Login sessions are token-based and expire after inactivity.
Access control — Only authorised Poriume staff with a legitimate need can access user data, and all access is logged.
Infrastructure security — Our servers are hosted in secure, monitored data centre environments.
Despite these measures, no system is 100% invulnerable. We encourage you to use a strong, unique password and to enable your transaction PIN to protect your account.
Section 07
Cookies & Local Storage
Poriume uses minimal cookies and browser/app local storage to maintain your login session and remember your preferences. Specifically:
Session cookies — Used to keep you logged in during a browsing session. These are cleared when you log out or close the app.
Persistent cookies — A "remember me" token that keeps you logged in across sessions, if enabled. This expires after a set period.
No tracking cookies — We do not use third-party advertising or analytics tracking cookies.
You can clear cookies and local storage via your browser or app settings at any time. Doing so will log you out of your account.
Section 08
Sharing Your Information
Poriume does not sell, rent, or trade your personal information. We share your data only in the following limited circumstances:
Service delivery partners — Telecom networks (MTN, Airtel, Glo, 9mobile), DISCOs (electricity distributors), cable TV providers (DStv, GOtv, Startimes), and betting platforms receive only the transaction data necessary to fulfil your service request (e.g., phone number or meter number).
Banking partner (virtual account) — As described in Sections 3 and 5, your name, phone, email, and BVN/NIN (pass-through only) are shared with 9Payment Service Bank / PayVessel for virtual account issuance.
Legal obligations — We may disclose information to government authorities, law enforcement, or regulators if required by Nigerian law, court order, or to protect the rights and safety of Poriume and its users.
Business transfers — If Poriume is acquired or merges with another entity, your data may be transferred as part of that transaction. You will be notified before your data is transferred and becomes subject to a different privacy policy.
In all cases, we require third parties to maintain the confidentiality and security of your data in accordance with this Policy and applicable law.
Section 09
Data Retention
We retain your personal data for as long as your account is active and as necessary to provide our services. When you delete your account:
Your personal profile data (name, email, phone) is deleted within 30 days.
Transaction records are retained for a minimum of 6 years as required by the Federal Inland Revenue Service (FIRS) and applicable financial regulations in Nigeria.
Anonymised or aggregated data (which cannot be linked to you personally) may be retained indefinitely for statistical and service improvement purposes.
For wallet balance refund procedures before account deletion, please see our Account Deletion Policy.
Section 10
Your Rights Under the NDPR
Under the Nigeria Data Protection Regulation (NDPR) 2019, you have the following rights regarding your personal data:
Right of access — You may request a copy of the personal data we hold about you.
Right to rectification — You may request that inaccurate or incomplete data be corrected.
Right to deletion (erasure) — You may request the deletion of your account and associated personal data, subject to legal retention obligations.
Right to restrict processing — You may request that we limit how we use your data in certain circumstances.
Right to data portability — You may request a copy of your data in a structured, machine-readable format.
Right to object — You may object to our processing of your data where we rely on legitimate interests as the legal basis.
Right to withdraw consent — Where processing is based on your consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you believe we have not handled your data appropriately, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).
Section 11
Third-Party Services
Our platform integrates with third-party services to deliver our offerings. These include:
PayVessel / 9Payment Service Bank — Virtual account creation and wallet funding.
Telecom APIs — For airtime and data recharge delivery.
Monnify (Interswitch / Moniepoint / other payment gateways) — For payment processing where applicable.
Email service providers — For sending transactional emails (account verification, notifications).
These third parties operate under their own privacy policies. Poriume is not responsible for the data practices of these third parties once data is transmitted to them for service delivery. We encourage you to review their respective privacy policies.
Section 12
Changes to This Privacy Policy
We may update this Privacy Policy from time to time as our services evolve or as required by law. When we make material changes, we will:
Update the "Last Updated" date at the top of this page.
Send a notification to the email address associated with your account (for significant changes).
Display a prominent notice within the Poriume app.
Your continued use of Poriume after any changes indicates your acceptance of the updated Privacy Policy. If you do not agree with the changes, please discontinue use and contact us to close your account.
Section 13
Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer:
We are committed to resolving your privacy concerns promptly and transparently. We aim to respond to all requests within 30 working days.
Reach Us Anytime
Our support team is available 24/7. For privacy matters specifically, please mark your email subject as "Privacy Request — [Your Name]" to ensure the fastest routing.
