Privacy Policy

1. Introduction

Welcome to BMP CP Transact ("the App"). The App is developed and operated by BALADEBJEW MULTI PURPOSE MULTI STATE COOPERATIVE SOCIETY LIMITED (referred to as "we", "us", "our", or "Organization"), operating under the brand name BMP Microfinance.

This Privacy Policy describes our policies and practices regarding the collection, use, maintenance, and disclosure of information when you use our App. We are committed to protecting the privacy and security of our users. BMP CP Transact is a specialized enterprise mobile application designed strictly for Cooperative Promoters (CP) of our organization, and is not intended for the general public.

2. Data Collection

We respect your privacy and adhere to data minimization principles. We do not collect or capture sensitive personal data, location tracking data, contacts, files, media, browser history, or device identifiers beyond what is strictly necessary to perform secure operations.

The only information requested or processed through the App is categorized below:

• Authentication Credentials: A username and password chosen by you during signup to log in.
• Cooperative Identity Information (Signup): Your unique Cooperative Promoter Code (CP Code) and registered Phone Number.

3. Verification & Signup

To register an account on the App, you must provide your CP Code and Phone Number.

Please note that this information is not collected to build new profiles or for marketing. It is cross-referenced in real-time against our secure pre-existing databases. This step is strictly required to verify your legitimacy as an active promoter of the Organization, preventing unauthorized signups and safeguarding financial assets.

4. How We Use Data

We process your authentication and verification data solely for the following purposes:

• To verify and confirm your association as a legitimate Cooperative Promoter of our organization.
• To authenticate your identity during login, ensuring secure session management.
• To enable financial transactions and member operations assigned to your promoter profile.
• To prevent fraud, abuse, and unauthorized access to the Organization's database and systems.

5. Data Sharing & Disclosure

We do not sell, trade, rent, or share your data with third-party organizations, advertisers, or analytics providers. Since we do not track usage or gather profile diagnostics, no data is transferred or disclosed external to our secure databases, except as required in the following scenarios:

• Compliance with Law: We may disclose information if required to do so by applicable financial regulations, court orders, or law enforcement investigations.
• Protection of Rights: We may disclose data to enforce compliance protocols and protect the security or integrity of our systems and financial services.

6. Security Standards

We implement strict administrative, technical, and physical security measures to protect your authentication credentials and records against loss, theft, unauthorized access, alteration, and destruction:

• All network communications between the mobile application and our backend servers are encrypted using Secure Socket Layer/Transport Layer Security (SSL/TLS) protocols.
• Passwords are securely encrypted on our servers using modern hashing algorithms.
• Access to the internal verification database is strictly restricted to authorized administrative personnel on a need-to-know basis.

7. Retention & Deletion

We retain credentials as long as your profile remains an active Cooperative Promoter in the Organization. If you wish to delete your account or request the removal of your authentication data, you can do so by contacting us.

To request data deletion, you can contact our security officer at the email address provided in Section 9. Alternatively, you can submit an online request directly using our Account & Data Deletion Request Form.

Upon receiving your request (either via email or the online form), we will verify your identity and delete your credentials from the active application database within standard legal timeframes (typically within 30 days), unless retention is required by financial compliance laws.

8. Children's Privacy

Our App is designed exclusively for adult corporate promoters and is not intended for use by minors. We do not knowingly collect, solicit, or maintain personal information from children under the age of 18. If we discover that a child under 18 has registered an account, we will immediately terminate the credentials and delete the associated data.

9. Contact Information

If you have any questions about this Privacy Policy, your account verification, or to request data deletion, please contact us at: