Paygent lets your AI agents pay, with your approval every time. Here is what we collect to do that, who sees it, and how you stay in control. The short version:
- We never sell your dataNo advertising, no data brokers, no tracking cookies.
- Agents never see your secretsNot your PIN, your BVN, your bank details, your card number or your full balance.
- Nothing moves without youEvery payment waits for your PIN or Face ID.
- Your data, on requestAsk for a copy, a correction or deletion at any time.
1Who we are
Paygent runs the wallet at paygenthq.online, the Paygent phone app, and the connector that AI agents such as Claude and ChatGPT use to pay. Paygent is a technology company, not a bank. Payments, deposit accounts, payouts, agent cards and identity checks are provided by licensed financial institutions we partner with, under their licences.
We decide how your personal data is used, so we are its controller under the Nigeria Data Protection Act 2023 (NDP Act) and the other data protection laws that apply to you. We collect only what we need, and use it only for the reasons below.
2What we collect
Five kinds of data, each for a clear reason:
Your account
Name, email, phone and the PINs you set. PINs are kept only as one-way hashes, so nobody at Paygent can read them.
To run your wallet · ContractWho you are
Legal name, date of birth, gender, address and BVN, before agent cards and higher limits. Your BVN is stored encrypted.
Know-your-customer rules · Legal dutyYour money
Deposits, withdrawals, payments, fees, exchange rates, recipients, and the bank accounts you withdraw to.
To move your money · ContractYour agents
Which agents you connected, each one’s slot and daily limit, what it asked to buy, its receipts, and how each checkout went.
To run your agents · ContractSecurity
Sign-ins, device name, IP address, the phone app’s push token, the Chrome extension you linked, and security events.
Fraud and money-laundering checks · Legal duty and legitimate interestIt comes from you, from the agents you connect when they ask to pay, from our payment partner when money arrives or a check returns, and from your device when you use Paygent. We never ask for your bank login, and we never store full card numbers; our payment partner holds those.
3Your agents and your card
An agent only gets what it needs to buy what you asked for, within the slot you gave it.
What an agent sees
- What it can still spend today
- Which payment methods are available
- The status and receipts of its own payments
- The agent card’s last four digits, the name on it, its billing address and your phone number, to fill a shop’s billing form
What it never sees
- Your PINs
- Your BVN or bank details
- Your full balance
- Another agent’s payments
- The card number, expiry or security code
Paygent enters the card for your agent, after you approve, and only on the page of the shop you approved. If that page is open in your own Chrome with the Paygent extension, the extension fills the card in there (see below). Otherwise a secure browser on Paygent’s own servers does it; that browser is closed afterwards and the website’s cookies are deleted with it. If your bank asks for a code, you type it yourself, on the payment page; Paygent never answers your bank’s checks. A shop may keep the card if its checkout is set to, but the card stays locked and empty between payments, so it can only be charged during a payment you approved, and only up to that amount.
Paygent issues your agent card through its own card-issuing programme, after an identity check, and controls it at all times. It rests suspended with nothing on it. For a payment you approved, Paygent switches it on and loads that amount for a few minutes, then takes back what is left and suspends it again; you are told each time it is switched on or off, and you can freeze it yourself at any time. A charge we did not expect suspends the card at once and restricts the wallet while our team looks into it, and every minute we check that no card is left switched on outside a payment.
4The Paygent extension for Chrome
The Paygent extension lets Paygent pay a card checkout that is already open in your own Chrome, instead of in Paygent’s browser. It is optional. You link it once on paygenthq.online with your approval PIN, and you can unlink it at any time from Settings or from the extension itself.
- To find the payment pageIt looks at the addresses of the tabs already open in your Chrome, on your computer, for the page your agent named. It never sends us your browsing history, and it never opens or moves a tab.On your computer
- To check the pageIt reads that page, on your computer, to check it is the shop you approved, that nothing on it asks for more than you approved, and where the card boxes are. Nothing is typed until your agent confirms the order.On your computer
- To payIt gets the card from Paygent once for that payment, over an encrypted connection, keeps it only in memory, fills in the card with its name and billing address (and your email and phone where the checkout asks for them), and presses Pay. A box the shop ticked to use another address with the card (“Use existing billing address”) is unticked, so the card’s own address goes in. Where a form takes only real key presses, it types through Chrome’s debugger on that one tab for those few seconds (Chrome shows that it is doing so). What it typed stays in that page’s boxes, in your own tab, as if you had typed it.Seconds
- What it tells PaygentWhether the payment went through, needed your bank’s code or stopped, the website the page was on, and the page’s own error message with any numbers removed.Kept with the payment
Paygent keeps only a one-way hash of the extension’s link key. The extension does not collect anything for advertising, does not share anything with anyone else, and does nothing on a page unless a payment you approved is waiting for it.
6How long we keep it
We keep data only as long as we need it, or as long as the law says.
- Payments, receipts and identity checksNigerian anti-money-laundering law requires them after your account closes.5 years
- Account and agent detailsWhile your account is open; longer only where they are part of a payment record.While open
- Messages to supportAfter your last message to us.3 years
- Security recordsLonger only if an investigation needs them.12 months
- Phone and agent sign-in codesPhone codes 8 days; agent sign-in codes 1 day.Days
- Checkout browserClosed when the payment is done, or after 20 minutes unused. Only the result stays.Minutes
- Chrome extension linkA one-way hash of its key, until you unlink it. The card it fills is never kept.Until unlinked
7How we keep it safe
Encrypted and hashed
Every connection uses HTTPS. Your BVN and other sensitive details are encrypted; PINs are hashed.
Your approval, every time
Payments need your PIN or Face ID. Five wrong PINs lock it and alert you.
Agents on a short leash
Short-lived access tied to one slot. Pause or disconnect any agent at once.
A card that stays locked
Paygent issues the agent card and keeps it suspended and empty between payments, loaded only with what you approved. An unexpected charge locks it at once.
Need-to-know staff
Only the people who need it can reach personal data, and every access is logged.
8Your rights
Under the NDP Act you can:
Get a copy
of the data we hold about you.
Correct it
when something is wrong.
Delete it
except what the law makes us keep.
Limit it
so we use it less while a question is open.
Take it with you
in a common format, to you or another company.
Object
to a use based on our legitimate interests.
Change your mind
and withdraw a consent you gave.
Email support@paygenthq.online from the address on your account, and we will reply within 30 days. Some things you can do yourself right now in the wallet: disconnect agents, switch off their tools, and download your receipts.
10Contact and complaints
For anything about your privacy, including reaching our data protection officer, write to us. A person on the Paygent team will reply.
support@paygenthq.onlineIf you are not happy with our answer, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng, or to the data protection authority where you live.
See also our terms of use and support page.