Draft for legal review. This policy describes how the NPF Vigilant system handles personal data. It has not yet been approved.
Privacy Policy
Last updated: [DATE]
Who we are
NPF Vigilant is operated by [DATA CONTROLLER NAME AND ADDRESS] for the Nigeria Police Force. Contact our data protection officer at privacy@npfvigilant.com.ng.
What we collect
- Account details: your first and last name, email address and, if you add it, your phone number. We do not use passwords; each sign-in is confirmed with a code sent to your email.
- Report details: your bank and account number, the account name returned by your bank, the transaction amount, date and type, your description, the suspect's account details, and any proof you upload (images or PDF documents).
- Recovery claims: the bank account you choose to receive recovered funds and the account name confirmed by the bank.
- Messages you exchange with the officers handling your case, including attachments.
- Security data: sign-in times, the IP address and device type used, and records of actions taken on your case.
How we use it
- To investigate your report, contact you about it and recover funds where possible.
- To check account names with banks (through our payment-service provider) so reports and claims go to the right accounts.
- To send sign-in codes and case updates to your email.
- To protect the service against fraud and abuse.
We do not sell your data and do not use it for advertising. The app contains no advertising or analytics trackers.
Who we share it with
- Officers of the Nigeria Police Force assigned to your case.
- The fraud desks of the banks involved, so they can restrict accounts and return funds.
- Service providers that process data for us: hosting, email delivery and bank account-name lookup. They may use it only to provide those services.
- Courts and other authorities where the law requires it.
How long we keep it
Reports and case records are kept for [RETENTION PERIOD] because they may be needed for investigations and prosecutions. If you delete your account, you can no longer sign in and your account details are no longer used, but reports you submitted remain with the authorities.
Security
Data is encrypted in transit (HTTPS). Access by staff is limited by role and every action on a case is logged. Uploaded files are only available through short-lived signed links.
Your rights
Under the Nigeria Data Protection Act 2023 you may ask to access, correct or delete your personal data, object to its processing or complain to the Nigeria Data Protection Commission. You can update your name and phone number in the app, and delete your account under Settings. For other requests, email privacy@npfvigilant.com.ng.
Changes
We will post any changes to this policy on this page and update the date above.