Privacy policy

The VAT System stores account identity, TIN/profile information, approved wallet addresses, payment intents, blockchain references and security audit logs.

Passwords are hashed. Session and refresh credentials use HttpOnly, SameSite cookies. Wallet private keys and seed phrases are never requested or stored.

Blockchain transactions are public and cannot be deleted. Confirmed financial and audit records are retained to preserve transaction and audit integrity.

Production use requires approved FIRS legal, retention, access-control and data-subject governance policies.

Last updated: 18 October 2026