Privacy Policy
How we collect, use, and protect your data, and the choices you have about all of it.
The short version
- We never sell your personal information. Full stop.
- Provider credentials are encrypted with AES-256-GCM and only ever decrypted in memory.
- Transaction records are kept 7 years for compliance; operational logs for 90 days.
- You can request access, correction, or deletion of your data at any time.
- We comply with GDPR and applicable African data protection laws.
A recap, not a replacement. The full text below is what applies.
01Overview
Reevit ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment orchestration platform.
We comply with applicable data protection laws including GDPR and applicable African data protection regulations.
02Information We Collect
We collect information that you provide directly to us:
Account information
- Name and email address
- Organization name and details
- Billing information
Payment provider credentials
- API keys and secrets (encrypted at rest using AES-256-GCM)
- Provider account identifiers
Transaction data
- Payment amounts and currencies
- Transaction status and metadata
- Customer identifiers (as provided by you)
Usage data
- API requests and responses
- Dashboard activity logs
- Feature usage patterns
03How We Use Your Information
We use the information we collect to:
- Provide and maintain our payment orchestration services
- Process and route payment transactions
- Send transactional notifications and webhooks
- Improve and optimize our platform
- Provide customer support
- Comply with legal obligations
- Detect and prevent fraud or abuse
We do not sell your personal information to third parties.
04Information Sharing
We may share your information with:
Payment service providers
- We transmit transaction data to the PSPs you have connected (Paystack, Hubtel, Flutterwave, etc.) as necessary to process payments.
Service providers
- We use trusted third parties for infrastructure (cloud hosting, monitoring) who are bound by confidentiality agreements.
Legal requirements
- We may disclose information if required by law or to protect our rights and safety.
We never share your PSP credentials with anyone. They are only decrypted in memory when processing your transactions.
05Data Security
We protect your data with:
- Encryption at rest: all sensitive data encrypted using AES-256-GCM
- Encryption in transit: TLS 1.3 for all API communications
- Access controls: role-based access with audit logging
- Key management: credentials decrypted only in memory when needed
- Infrastructure: SOC 2 compliant cloud infrastructure
No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
06Data Retention
We retain your data for as long as your account is active or as needed to provide services. Specifically:
- Account data: retained until account deletion
- Transaction records: retained for 7 years for compliance
- Logs: retained for 90 days for debugging and security
- Credentials: deleted immediately upon connection removal
You may request deletion of your data at any time, subject to legal retention requirements.
07Your Rights
Under applicable data protection laws, you have the right to:
- Access: request a copy of your personal data
- Rectification: correct inaccurate or incomplete data
- Erasure: request deletion of your data
- Portability: receive your data in a structured format
- Objection: object to certain processing activities
- Restriction: request limitation of processing
To exercise these rights, contact us at privacy@reevit.io.
08Cookies and Tracking
We use cookies and similar technologies to:
- Maintain your session and authentication
- Remember your preferences
- Analyze usage patterns
- Improve our services
You can control cookies through your browser settings. Disabling cookies may affect functionality.
09International Transfers
Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place, including:
- Standard contractual clauses
- Adequacy decisions where applicable
- Additional security measures for sensitive data
10Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
11Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through our platform. The "Last updated" date at the top indicates when this policy was last revised.
12Contact Us
For questions about this Privacy Policy or our data practices:
- privacy@reevit.io
- Data Protection Officer
- dpo@reevit.io
- Company
- Connectivity Support Systems LTD
Stop losing payments to provider downtime.
Free for your first 1,000 payments a month, and failed payments are never billed. Connect a provider and take your first payment before the coffee gets cold.