About
ComePay

Who we are, what we're building, and where we're going next.

Our Story

Personal
Banking

Everything you need to move, spend and grow your money — in one app.

Open Account

Business
Banking

Collect payments, pay staff and grow your operations with ComePay Business.

Explore Business

Multi
Currency

Hold, send and convert money in 7 global currencies at interbank rates.

Open FX Wallet
Home
Company
For Individuals
For Businesses
Send money abroadMulti Currency
Become an Agent Contact Us
Download the App Log In
HomeLegalPrivacy Policy

Privacy Policy & Data Protection Notice

How we collect, use, share, and protect your personal data.

Last updated: August 10, 2026 Cometstar Technologies Limited
On this page 1. Regulatory Compliance 2. Information We Collect 3. How We Use Your Personal Data 4. Data Sharing & Third-Party Processing 5. Data Retention & Security

1. Regulatory Compliance

ComePay is committed to protecting consumer privacy and personal data. This Privacy Policy outlines our compliance with the Nigeria Data Protection Act (NDPA) 2023, the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), and international data protection standards.

2. Information We Collect

We collect personal information necessary to fulfill our service delivery and regulatory obligations, including:

3. How We Use Your Personal Data

Your data is processed strictly for legal and operational purposes: verifying your identity via automated identity verification services (e.g., Prembly); processing payments and transfers; issuing virtual cards; managing POS agent terminals; detecting financial fraud; communicating service updates via Termii/Zendesk; and complying with regulatory reporting.

4. Data Sharing & Third-Party Processing

We do not sell consumer data. We share your personal data only with trusted third-party processors necessary for core service fulfillment, including: CBN-regulated banking partners (for account generation and settlement); PCI-DSS card processors (Bridgecard); identity verification platforms (Prembly); SMS/OTP routing gateways (Termii); and regulatory bodies (CBN, NFIU, FINTRAC) when legally required.

5. Data Retention & Security

We employ industry-standard encryption (TLS 1.3 in transit and AES-256 at rest), firewall defenses, and access controls to safeguard your information. Regulatory frameworks require us to retain customer KYC and transaction data for a minimum of five (5) to seven (7) years following account termination.