Privacy Policy

Settu lets you convert between USDC and your local currency. To do that we handle some personal information: your wallet address, the bank details you give for a payout or refund, and, when you buy USDC, identity details our payment partner is required to check.

• We collect only what a transfer needs.
• Identity details for buying USDC (date of birth, ID number, BVN) are passed to our payment partner with your order. Settu does not store them.
• We do not sell your information, and we do not use it for advertising.
• Settu never holds your funds or your wallet’s private keys.

“Settu”, “we” and “us” mean the team that operates settu.xyz and the Settu app. We decide how the information described here is used, which makes us its data controller. You can reach us at setturails@gmail.com.

When you connect a wallet

• Your public wallet address on Stellar, Solana or an EVM chain. We never see or store your private keys or recovery phrase.

When you sell USDC (offramp)

• The amount, currency and exchange rate.
• The payout bank account: bank, account number and the account holder’s name.
• The blockchain transaction references for your transfer.

When you buy USDC (onramp)

• The amount, currency, exchange rate and destination Stellar address.
• A refund bank account in your own name: bank, account number and account holder’s name.
• Identity details our payment partner is required to verify before it can accept a bank transfer: your full name (taken from your refund account), date of birth, and either your National Identification Number (NIN), or a passport or driver’s licence number together with your Bank Verification Number (BVN).

Those identity details are sent to our payment partner with that one order. They are not saved on Settu’s servers, not kept in your browser, and not included in our internal alerts. You are asked for them again on each purchase.

When you use the Settu Agent

• The messages you type, so the agent can understand your request. Please do not type ID numbers, BVNs or passwords into the chat: identity details are entered in the fields on the confirmation card, which are not part of the conversation.

When you create an account or contact us

• Your email address and any wallets you link, if you create an account.
• Whatever you send us by email, WhatsApp, Telegram, phone or the in-app report form, including a wallet address when you attach one.

Automatically

• Basic technical information such as IP address, browser type and request logs, which our hosting provider records to run and secure the service.
• Information saved on your own device (see “Storage on your device” below). We do not use advertising or cross-site tracking cookies.

• To carry out your transfers: quoting, verifying a bank account, creating the order, bridging USDC and paying out. This is necessary to provide the service you asked for.
• To meet verification requirements: the payment providers we work with must check the identity of anyone paying in by bank transfer.
• To keep transfers safe: detecting and recovering stuck transfers, preventing fraud and abuse, and keeping an audit trail of administrative actions. This is in our legitimate interest and yours.
• To support you: answering questions and resolving problems with a transfer.
• To show your history and notifications for the wallet you connect.

We share information only with the providers needed to run Settu, and only what each one needs:

• Paycrest, our payment partner, receives order details, the bank account details for the payout or refund, and for purchases the identity details described above. Paycrest and the licensed payment providers it routes through handle that information under their own privacy policies and legal obligations.
• Blockchain networks and Circle. Transfers happen on public blockchains (Stellar, Base, Solana and other supported networks) using Circle’s Cross-Chain Transfer Protocol. Wallet addresses, amounts and transaction references on a blockchain are public and permanent; we cannot change or delete them.
• Wallet connection providers (WalletConnect / Reown) relay the connection between Settu and your wallet app.
• Infrastructure providers: Vercel hosts the app, and Upstash stores order and transfer records.
• Google processes the messages you send to the Settu Agent, to interpret them.
• Telegram. Our team receives operational alerts about each transfer in a private channel (amount, status, wallet address and the bank account details for that order), so a stuck transfer is noticed and fixed quickly. Identity details are never included.
• Authorities, where the law requires it or to protect against fraud.

Some of these providers process information outside Nigeria. Where that happens we rely on the safeguards the law allows for such transfers.

• Identity details for a purchase: not kept by Settu at all.
• Bank details attached to an order: removed from our order records within 7 days. Copies in our internal alert channel and in support conversations are kept for as long as needed to resolve disputes and reconcile payments.
• Transfer records (wallet address, amounts, status and blockchain references): kept for the life of the service, as our financial audit trail.
• Support messages: kept while they are needed to help you and to handle any follow-up.

Settu saves a few things in your browser so the app works between visits: your wallet connection, your recent transfers (including the bank details you entered for them), which notifications you have read, your chosen source chain, and a sign-in token if you have an account. This stays on your device, and clearing your browser’s site data removes it. Your conversation with the Settu Agent is kept only while the app is open.

Information is encrypted in transit, access to administrative tools is restricted and logged, and we limit what we keep. No system is perfectly secure; if a breach affects your information we will tell you and the regulator as the law requires.

Under the Nigeria Data Protection Act 2023 you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is wrong;
• delete information we no longer need;
• stop or limit a use of your information that you object to;
• give you your information in a portable format.

Email setturails@gmail.com from an address we can link to you, or tell us the wallet address concerned. We will answer within 30 days. If you are unhappy with our response you can complain to the Nigeria Data Protection Commission.

For identity details checked by our payment partner, contact us and we will help direct your request to them.

Settu is for people aged 18 or over. We do not knowingly serve anyone younger.

If we change how we handle your information we will update this page and the date at the top. For significant changes we will also say so in the app.