Legal

Privacy Policy

Effective date: May 30th, 2026

This Privacy Policy explains how Hybrd collects, uses, stores, shares, and protects personal data when merchants, merchant representatives, authorized users, customers, counterparties, and visitors use Hybrd's platform, dashboard, APIs, website, verification tools, and related services. By using Hybrd or ticking “I Agree,” you confirm that you have read and understood this Privacy Policy.

1. Who We Are

Hybrd provides AI-powered automation and orchestration infrastructure for high-volume P2P and OTC merchants.

Depending on the activity, Hybrd may act as a data controller, data processor, responsible party, or service provider under applicable data protection laws.

Where a merchant uploads or processes personal data belonging to its customers, counterparties, staff, agents, or users, the merchant remains responsible for ensuring that it has the lawful basis, notice, consent, authority, and rights required to share that data with Hybrd.

2. Personal Data We Collect

  • Account information: name, business name, email address, phone number, username, role, and login information.
  • Business and onboarding information: company registration details, director or owner details, address, tax information, business documents, and compliance information.
  • Identity and verification information: government ID, selfie, liveness check, BVN/NIN or equivalent local identifiers where applicable, bank account details, wallet details, device information, and verification results.
  • Transaction information: collections, payouts, wallet funding, payment confirmations, bank references, exchange references, order details, transaction amounts, timestamps, merchant activity, reconciliation records, and dispute records.
  • Technical information: IP address, device ID, browser type, operating system, login history, API activity, cookies, system logs, and fraud-risk signals.
  • Communication information: support messages, emails, calls, feedback, complaints, and other communications with Hybrd.

3. How We Use Personal Data

  • create and manage merchant accounts;
  • verify merchant identity and business information;
  • connect merchants to exchanges, payment rails, verification providers, and service partners;
  • automate transaction workflows;
  • coordinate collections, payouts, wallet funding, reconciliation, and reporting;
  • confirm payments and reduce transaction risk;
  • detect, prevent, and investigate fraud, chargebacks, unauthorised activity, stolen funds, system abuse, and compliance breaches;
  • provide customer support;
  • improve platform performance, security, and user experience;
  • send service updates, compliance notices, and operational alerts;
  • comply with legal, regulatory, tax, audit, law enforcement, and partner requirements;
  • protect Hybrd, merchants, customers, counterparties, partners, and the public.

4. Lawful Basis for Processing

Hybrd processes personal data where one or more lawful bases apply, including:

  • performance of a contract;
  • consent;
  • compliance with legal or regulatory obligations;
  • legitimate business interests;
  • fraud prevention and platform security;
  • establishment, exercise, or defence of legal claims;
  • protection of users, merchants, partners, and the integrity of the platform.
  • Where consent is required, Hybrd will request consent. You may withdraw consent where permitted by law, but this may affect your ability to use some Hybrd services.

5. Sharing Personal Data

Hybrd may share personal data with:

  • payment, banking, wallet, and settlement partners;
  • identity verification and fraud prevention providers;
  • exchange integration providers and connected platforms;
  • cloud hosting, analytics, communication, and technology service providers;
  • professional advisers, auditors, insurers, and legal counsel;
  • regulators, law enforcement agencies, courts, tribunals, and government authorities where required or permitted by law;
  • affiliates, successors, or acquiring entities in the event of restructuring, investment, merger, acquisition, or transfer of business.
  • Hybrd does not sell personal data.

6. Merchant Customer and Counterparty Data

Where merchants process customer or counterparty data through Hybrd, merchants must ensure that they have provided appropriate notices and obtained all required consents, authorisations, or lawful bases before using Hybrd.

Merchants are responsible for ensuring that their customers and counterparties understand that their data may be processed for payment confirmation, verification, fraud prevention, reconciliation, dispute management, and transaction monitoring.

7. Cross-Border Processing

Hybrd may process or store personal data in countries outside the country where the data was collected, including where Hybrd, its infrastructure providers, payment partners, verification providers, or support teams operate.

Where required, Hybrd will use reasonable safeguards to protect personal data during cross-border processing, including contractual obligations, access controls, security measures, and partner due diligence.

8. Data Retention

Hybrd will retain personal data for as long as reasonably necessary to provide services, comply with legal and regulatory obligations, resolve disputes, prevent fraud, enforce agreements, maintain audit trails, and protect legitimate business interests.

Transaction, verification, consent, and compliance records may be retained for longer periods where required for legal, audit, regulatory, dispute, or fraud prevention purposes.

9. Data Security

Hybrd uses reasonable technical, organisational, and administrative safeguards to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

These safeguards may include access controls, authentication, encryption where appropriate, monitoring, audit logs, staff controls, partner reviews, and incident response procedures.

No system is completely secure, and users are responsible for keeping login credentials, API keys, devices, and connected accounts secure.

10. User Rights

Subject to applicable law, individuals may have the right to:

  • access their personal data;
  • request correction of inaccurate data;
  • request deletion of data where permitted;
  • object to certain processing;
  • withdraw consent where consent is the lawful basis;
  • request restriction of processing;
  • request portability where applicable;
  • complain to a relevant data protection authority.
  • Requests may be submitted to Hybrd using the contact details below. Hybrd may request verification before acting on any request.

11. Cookies and Tracking

Hybrd may use cookies, device identifiers, analytics tools, and similar technologies to operate the platform, secure accounts, remember preferences, monitor usage, improve performance, and detect fraud or abuse.

Users may control cookies through browser or device settings, but some platform features may not work properly if cookies are disabled.

12. Marketing Communications

Hybrd may send service updates, platform notices, product announcements, and relevant business communications.

Where required by law, Hybrd will obtain consent before sending marketing communications. Users may opt out of marketing communications, but operational, security, legal, and transactional messages may still be sent.

13. Updates to This Policy

Hybrd may update this Privacy Policy from time to time to reflect product changes, legal requirements, market expansion, partner requirements, or operational updates.

Updated versions will be made available on the platform. Continued use of Hybrd after an update means you acknowledge the updated Privacy Policy.

14. Contact

  • Company: Usehybrd Limited
  • Email: help@usehybrd.com
  • Address: 1, Agu Amaechi Street, Canaan Estate, Lekki Epe Expressway, Lagos State.