Security and trust

Your money goes straight to you. Your keys stay locked.

Tranzwa sends the invoice, checks the payment and sends the receipt. The money itself moves from your customer, through your own gateway, to your bank. We never touch it.

Start free Report a security problem

₦0

of your money ever held by Tranzwa

100%

of payments checked with your gateway before a receipt goes out

card numbers seen or stored by Tranzwa

Where your money goes

Customer → your gateway → your bank

Tranzwa sits beside the payment, never in the middle of it. If Tranzwa went offline tomorrow, the money already paid would still be in your account.

Your customer

pays from the WhatsApp chat

Your gateway

Paystack, Flutterwave and others

Your bank

settled on the gateway’s usual schedule

Tranzwa sends the invoice and Pay now link · asks your gateway “was this paid?” · sends the receipt and your alert

Five things we do

How we keep you safe

Keys stored securely, never shown again

Once saved, a key is masked and never shown again, not even to Tranzwa staff. You can replace it at any time.

Keys tested before you go live

We check your keys with the gateway when you add them, so a typo can’t cost you a sale.

We never hold your money

Payments settle from your gateway to your bank. There’s no Tranzwa balance to wait for or withdraw.

Every payment checked

Before a receipt goes out, we confirm the payment with your gateway. A screenshot or a fake alert can’t trigger one.

Each person sees only their part

Owner, Accounts, Sales, Gate staff and Tabs staff roles. Gate staff can scan tickets without seeing money.

Card details

Card numbers never touch Tranzwa

When a customer pays by card, they type it into your gateway’s own checkout page. Tranzwa only learns that the payment succeeded, the amount and the method, never the card number, CVV, PIN or OTP.

We don’t hold PCI DSS or ISO 27001 certificates ourselves, and we don’t need to: card data stays with your gateway.

Card number, CVV, PIN, OTP Gateway only

Paid or not, amount, method Shared with Tranzwa

Customer name and WhatsApp number You and Tranzwa, to send receipts

Your gateway keys Stored securely, write-only

Spot a fake

Tranzwa will never ask for

your dashboard password or 2-step code, on WhatsApp, email or phone
your gateway secret keys in a chat
a customer’s card PIN or OTP in the chat (those go on the gateway’s page only)
money to “unlock” an account or a payout

Real Pay now links start with app.tranzwa.com/pay

After you tap Pay now, you pay on the business’s own payment provider page (Paystack, Flutterwave and others). That’s expected. A link that says it’s from Tranzwa but starts with any other address is not us: don’t pay or log in, and forward it to [email protected].

Responsible disclosure

Found a security problem? Tell us first.

Email [email protected] with what you found, the steps to reproduce it and the page or endpoint. We reply within 2 working days and keep you posted until it’s fixed.

Email [email protected]

Please doUse your own test account. Give us a fair chance to fix it before telling anyone else.

Please don’tAccess other businesses’ data, run load tests, or send messages to real customers.

We willNot take legal action over good-faith research that follows these rules.

CreditWith your permission, we thank you by name once it’s fixed.

Questions