Who we are
Hethera is operated by Hethera Engineering Ltd (RC 9859449), 16, Adisa Basua Street, Surulere, Lagos State, Nigeria (“Hethera”, “we”, “us”). We control the personal data described here, and we process it in line with the Nigeria Data Protection Act 2023.
What we collect
- Your WhatsApp number and profile name. Your WhatsApp number is your Hethera account ID. We create the account when you first message us.
- The name you give us, so we know what to call you.
- Your messages to Hethera, so we can understand and carry out your requests.
- Your transaction PIN, stored only as a one-way hash. You enter it in an encrypted WhatsApp form. It is never sent as a chat message, and we cannot read it back.
- A card token from Paystack, plus your card's last four digits, card type and bank name. We never receive or store your full card number, expiry date or CVV.
- Purchase details, such as phone numbers, meter numbers, smartcard numbers, amounts, plans and transaction references, plus any beneficiaries you save.
- Feedback you choose to send us.
How we use it
- To make the purchases you ask for, charge your saved card and send you receipts.
- To check your identity before a payment and to prevent fraud.
- To handle refunds, disputes and support requests.
- To keep the financial and audit records the law requires.
- To improve the service, using records that are aggregated or have names and numbers removed.
We do not sell your personal data, and we do not use it for third-party advertising.
AI processing
An AI model reads your messages so it can understand your requests and reply. The model is provided by Anthropic. The AI never receives your PIN or card details. Your recent conversation is kept for 4 hours after you stop chatting, then deleted automatically.
Who we share it with
- Meta Platforms (WhatsApp), which delivers messages between you and us.
- Paystack, which processes card payments and refunds.
- VTpass, our bill-payment partner, which receives only the details needed to deliver your airtime, data, cable or electricity purchase.
- Anthropic and our cloud hosting providers. They act only on our instructions.
- Regulators or law enforcement, when the law requires it.
How long we keep it
Conversation history expires automatically after a period of inactivity. Transaction and ledger records are kept for as long as Nigerian financial record-keeping laws require. Everything else is deleted when you close your account.
Your rights
You can ask us to access, correct, delete or export your personal data. You can also object to how we process it, or withdraw your consent. Email [email protected]. You may also complain to the Nigeria Data Protection Commission.
Security
Data is encrypted while it travels between systems. PINs are stored only as hashes. Card data stays with Paystack. Staff can see customer records only when their job requires it.
Children
Hethera is for people aged 18 and over. We do not knowingly collect data from children.
Changes to this policy
If we change this policy, we will update the effective date at the top of this page. If the changes are significant, we will also tell you in the chat.