Data Protection & Transparency

Privacy Policy

Last Updated: July 28, 2026 • Effective Date: July 28, 2026

Summary & Commitment

At NicksPay, we prioritize student privacy, data protection, and transparent payment processing. This Privacy Policy details how we collect, use, and safeguard personal and payment information across our multi-tenant campus payment platform and organization portals.

1. Overview & Data Controller Role

NicksPay ('we', 'us', or 'our') is a specialized multi-tenant payment software platform developed by Nick Frost Innovations for Nigerian tertiary institution student organizations, faculties, departmental associations, and campus bodies.

NicksPay operates strictly as a software interface layer connecting student payers, student organization executives, and licensed payment gateways. NicksPay does not operate as a bank, deposit-taking financial institution, or wallet provider.

2. Information We Collect

We collect only the minimum necessary information required to process online payment transactions, issue digital print receipts, and enable live anti-fraud verification at campus entry points.

  • Student Identity Information: Full Name, Matriculation / Registration Number, Email Address, Department, Faculty, Academic Level, and Academic Session.
  • Payment Transaction Details: Payment Category (e.g., Department Dues, Faculty Dues, Event Ticket, Merchandise), Transaction Amount, Payment Gateway Reference Number, Payment Channel (Card, Bank Transfer, USSD), and Timestamp.
  • Organization Account Details: Organization Name, Executive Contact Details, Official Bank Account Details for Direct Settlement, and Merchant Gateway API Credentials (when operating in Bring Your Own Account - BYOA mode).
  • Technical & Log Metadata: Device browser type, IP address, and access timestamps recorded during receipt printing and QR code verification to prevent fraud and maintain operational security.

3. How We Use Your Information

Your information is collected and processed solely for legitimate operational and administrative purposes directly related to student dues collection and financial transparency.

  • Processing online card, bank transfer, and USSD payments securely via licensed payment gateway partners.
  • Generating official digital print receipts embedded with unique live QR verification codes.
  • Enabling authorized student organization executive officers (e.g. Treasurers, Presidents) to verify dues payment status at exam hall entry, registration clearance, and event check-in.
  • Facilitating direct bank settlement of collected dues directly into the organization's official bank account without platform fund holding.
  • Providing executive officers with aggregated real-time financial dashboards, transaction ledgers, and downloadable CSV/Excel audit reports.

4. Data Sharing & Third-Party Processors

We respect your data privacy. We NEVER sell, rent, trade, or monetize student or organization personal data to third-party advertisers, data brokers, or marketing agencies.

Information is shared strictly with the following necessary operational entities:

  • Licensed Payment Gateways (e.g., Paystack, Flutterwave, Monnify): To execute online transactions, perform fraud security checks, and confirm payment status.
  • Authorized Organization Executive Officers: Designated student executives receive transaction lists (Name, Registration Number, Amount, Status, Reference) for dues record-keeping and audit clearance.
  • Legal & Regulatory Authorities: Only when explicitly compelled by applicable laws of the Federal Republic of Nigeria or a valid court order.

5. Multi-Tenant Data Isolation & Security

We implement multi-tenant database isolation, strictly partitioning records by Organization ID so that no organization can view, modify, or access another organization's student records.

Payment credentials, API keys, and secret keys are stored using server-side AES-256 encryption. Gateway webhooks are cryptographically signed and verified using HMAC algorithms before any transaction state is updated.

All web traffic between user devices, tenant sub-portals, and NicksPay servers is encrypted using standard SSL/TLS protocols.

6. Data Retention & Student Rights

Transaction records and digital receipt verifications are retained for the duration of the academic session and subsequent audit periods to provide an unalterable audit trail and prevent duplicate payment claims.

Students have the right to request confirmation of their payment record status, request corrections to mis-entered student registration numbers through their organization executives, or contact NicksPay support.

7. Privacy Enquiries & Data Officer

If you have questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact our team:

Nick Frost Innovations (Developer of NicksPay)

Lead Engineer: Nicholas Benson (Nick Frost)

Email: bensonnicholas206@gmail.com | Phone: +234 906 752 9053

Address: Federal University Oye-Ekiti (FUOYE), Ekiti State, Nigeria.

Need help or have privacy questions?

Contact Nick Frost Innovations Data Protection Support team.