Material changes are announced before they take effect.
Privacy Policy
How Thagbiz Trust collects, uses, and protects your information.
This policy describes the personal information we handle when you use Thagbiz Trust, why we handle it, who we share it with, and the choices and rights you have. Last updated May 22, 2026.
Make most requests from your dashboard. The rest go to support@thagbis.com.
Basic profile fields. No Gmail, Drive, Calendar, or training of AI models.
Your information is not sold to advertisers or unrelated third parties.
1/1POLICY DETAIL
The full policy, section by section.
If you only want the headline answers, the four cards above cover them. Everything else is in the sections below.
1. Introduction
Thagbiz Trust (“Thagbiz,” “we,” “us,” or “our”) operates a cross-border payments platform that combines wallets, instant transfers, protected escrow, dispute handling, and identity verification. This Privacy Policy explains what personal information we collect, how we use and share it, and the rights and choices you have.
By creating an account, signing in with Google, or otherwise using our services at thagbis.com or in our mobile applications, you agree to the practices described in this policy.
2. Information we collect
Account information you provide directly: full name, email address, phone number, country, password, and language preference.
Identity verification (KYC) information: government-issued identification, selfie or liveness images, address documents, and verification results received from our identity provider. KYC data is required to unlock higher transaction limits and to comply with applicable anti-money-laundering rules.
Wallet and transaction information: deposits, withdrawals, transfers, escrow records, dispute history, ledger entries, currency conversions, and counterparties involved in those transactions.
Authentication and device information: IP address, browser type, operating system, device identifiers, session timestamps, and security logs we maintain to detect fraud and unauthorized access.
Communications: support tickets, messages exchanged with our team, contact form submissions, and notification preferences.
Information from third parties: when you sign in with Google, we receive your name, email address, profile picture, and a verified token identifying your Google account. We do not receive your Google password.
3. How we use information
Provide and operate the service: create and authenticate your account, fund and release escrow, send and receive transfers, manage wallet balances, process currency conversions, and respond to support requests.
Verify identity and prevent fraud: run KYC checks, monitor transactions for suspicious activity, prevent account takeover, and enforce platform safety rules.
Comply with legal obligations: meet anti-money-laundering, counter-terrorist-financing, tax reporting, and law enforcement requirements applicable to regulated payment activity.
Communicate with you: send verification codes, transaction confirmations, security alerts, dispute updates, password reset codes, and product announcements you have not opted out of.
Improve the platform: analyze how users interact with features so we can fix bugs, improve performance, and design better workflows. We do not sell behavioral data to advertisers.
4. How we share information
Payment providers: we share the information required to settle transactions with regulated payment processors and rails (for example Paystack for Naira processing). They receive only what is needed to complete the specific transaction.
Identity verification provider: we share KYC documents and identifiers with our verification provider (Youverify) to confirm your identity. They process this data on our behalf under a data processing agreement.
Email delivery: transactional emails such as verification codes and password resets are delivered through our email provider (SendPulse). They receive only your name, email address, and the email content.
Authentication provider: when you choose Google Sign-In, Google receives information necessary to issue an authentication token. Their handling of that data is governed by the Google Privacy Policy.
Cloud infrastructure: account data, transaction records, and logs are stored with our hosting and database providers (including Vercel and Neon). They process data on our instructions.
Legal and safety: we may disclose information when required by law, court order, or regulator, or when necessary to investigate fraud, protect our users, or defend the platform.
Business transfers: if Thagbiz is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to the protections described in this policy.
We do not sell your personal information.
5. Google account data
When you sign in with Google, we use only the basic profile fields Google provides (name, email, profile picture) and the identifier needed to log you in on return visits.
We do not request access to your Gmail, Drive, Calendar, Contacts, or any other Google service beyond basic profile sign-in.
We do not use Google user data to train artificial intelligence or machine learning models.
We do not sell or transfer Google user data to third parties for advertising or unrelated purposes.
You can revoke our access at any time from your Google Account at myaccount.google.com/permissions.
6. Data retention
We retain account, transaction, and KYC information for as long as your account is active and afterward as required by financial-services record-keeping laws (typically five to seven years from the closing of the account or the date of the relevant transaction).
Authentication logs and security telemetry are retained for a shorter period sufficient to detect and investigate fraud or unauthorized access.
When the legal retention period expires and the data is no longer required, we delete or anonymize it.
7. Your rights and choices
You can access and update most account information from inside the dashboard. For requests we cannot fulfill from the dashboard (such as data export, correction of KYC records, or deletion of a closed account), contact us at support@thagbis.com.
Subject to applicable law, you have the right to request access to your personal data, correction of inaccurate data, deletion of data we no longer need to retain, restriction of processing, and the right to lodge a complaint with your local data protection authority.
You can opt out of non-essential communications using the link included in those messages. Transactional and security messages cannot be opted out of while you have an active account.
8. Security
We use encryption in transit, server-side hashing of passwords with bcrypt, role-based admin access, audit logging, and continuous monitoring of authentication events.
No platform can guarantee absolute security. Keep your password and 2FA codes private, use a strong password, and notify us immediately at support@thagbis.com if you suspect your account has been compromised.
9. International data transfers
Thagbiz operates a cross-border product. Your information may be processed in countries other than the one you live in, including in jurisdictions where the legal protections for personal data may differ from those in your home country.
Where required, we use contractual safeguards with our processors to maintain the protections described in this policy.
10. Children
Our services are not directed to anyone under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child, contact us at support@thagbis.com and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes we will notify you by email or by an in-app notice before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.
12. Contact
Questions, requests, or complaints about this policy can be sent to support@thagbis.com. We will respond within a reasonable time and in line with applicable data protection law.