Who we are
Hethera is operated by Hethera Engineering Ltd (RC 9859449), 16, Adisa Basua Street, Surulere, Lagos State, Nigeria (“Hethera”, “we”, “us”). We control the personal data described here, and we process it in line with the Nigeria Data Protection Act 2023.
What we collect
- Your WhatsApp number and profile name. Your WhatsApp number is your Hethera account ID. We create the account when you first message us.
- The name you give us, so we know what to call you. People you send an Ejor request to also see this name.
- Your email address, collected when you set up your account. Paystack needs it to save your card and send your payment receipts. We do not send you marketing email.
- Your messages to Hethera, so we can understand and carry out your requests.
- Your transaction PIN, stored only as a one-way hash. You enter it in an encrypted WhatsApp form. It is never sent as a chat message, and we cannot read it back.
- A card token from Paystack, plus your card's first six and last four digits, card type and bank name, and a card fingerprint from Paystack that lets us recognise the same card without knowing its number. We never receive or store your full card number, expiry date or CVV.
- Purchase details, such as phone numbers, meter numbers, smartcard numbers, amounts, plans and transaction references, plus any beneficiaries you save.
- Ejor details, if you use Ejor: whether you accept requests, the people you send requests to or receive them from, the bills involved, and anyone you have blocked.
- Dash gift details, if you send or receive a gift: who it's from and to, the gift, the occasion and note, the delivery day, and the phone number or meter the person receiving it chooses.
- Scheduled payments you set up: the bill, the amounts, the dates, and a record of each time you confirmed or changed it with your PIN.
- Spending reports you ask for: the period, a copy of the figures shown, when the link was opened, the type of browser that opened it, and a scrambled (hashed) form of its internet address. We never store the link itself.
- Fraud-prevention records: alerts our automated checks raise about unusual activity on an account, and our team's notes when they review them.
- Feedback you choose to send us.
How we use it
- To make the purchases you ask for, charge your saved card and send you receipts.
- To check your identity before a payment and to prevent fraud.
- To spot fraud and misuse. Automated checks look at account activity, such as many purchases in a short time, repeated card declines, or the same card or email on several accounts, and flag anything unusual for a person on our team to review. These checks don't make decisions about you on their own.
- To build the spending reports you ask for and answer questions about your spending.
- To pass Ejor requests between you and the people you choose.
- To deliver Dash gifts and refund them when they aren't accepted.
- To make the scheduled payments you set up, and to show what you agreed to if a payment is disputed.
- To handle refunds, disputes and support requests.
- To keep the financial and audit records the law requires.
- To improve the service, using records that are aggregated or have names and numbers removed.
We do not sell your personal data, and we do not use it for third-party advertising.
AI processing
An AI model reads your messages so it can understand your requests and reply. The model is provided by Anthropic. The AI never receives your PIN or card details. Your recent conversation is kept for 4 hours after you stop chatting, then deleted automatically.
Who we share it with
- People you use Ejor with. If you send a request, the person you ask sees your name, your WhatsApp number and the bill. If you pay one, the person you paid for sees your name. We never tell someone why a payment you made didn't go through.
- People you send Dash gifts to. They see your name, your WhatsApp number, the gift, the occasion and your note. We don't tell you which number or meter they chose, or why someone can't receive gifts.
- Meta Platforms (WhatsApp), which delivers messages between you and us.
- Paystack, which processes card payments and refunds.
- VTpass, our bill-payment partner, which receives only the details needed to deliver your airtime, data, cable or electricity purchase.
- Anthropic and our cloud hosting providers. They act only on our instructions.
- Regulators or law enforcement, when the law requires it.
How long we keep it
Conversation history expires automatically after a period of inactivity. A spending report link stops working once it has been opened, or after 24 hours if it hasn't, and the report's figures are deleted after 30 days. Transaction and ledger records are kept for as long as Nigerian financial record-keeping laws require. Fraud-prevention records are kept as long as we need them to prevent fraud, or as the law requires. Everything else is deleted when you close your account.
Your rights
You can ask us to access, correct, delete or export your personal data. You can also object to how we process it, or withdraw your consent. Email [email protected]. You may also complain to the Nigeria Data Protection Commission.
Security
Data is encrypted while it travels between systems. PINs are stored only as hashes. Card data stays with Paystack. Spending report links are random, work once and are stored only in a scrambled form, so even our staff cannot open your report. The report page (report.hetheraengineering.com) tells search engines not to index it. Staff can see customer records only when their job requires it.
Cookies
Our websites don't use cookies for advertising or analytics. Our Cookie Policy lists the little they store in your browser and why.
Children
Hethera is for people aged 18 and over. We do not knowingly collect data from children.
Changes to this policy
If we change this policy, we will update the effective date at the top of this page. If the changes are significant, we will also tell you in the chat.