Aftoria values the privacy of its users and complies with the General Data Protection Regulation (GDPR) and the Nigeria Data Protection Act (NDPA).
The platform only collects business and account information necessary for account creation, payment connection, and communication — such as company name, email address, phone number, and PSP API credentials.
Aftoria does not collect or store any cardholder data, payment credentials, or financial information from end customers.
All data is stored securely on Amazon Web Services (AWS) servers located in GDPR-compliant regions, and access is restricted using encryption and role-based permissions.
Users can request data deletion or export at any time by contacting support@aftoria.io.