Privacy Policy

1 What We Collect

When you create a Vezstora account we collect:

• •Account information — your email address and encrypted password.
• •Store data — your store name, slug, description, logo, product listings, and customisation settings.
• •Transaction data — order details including customer email addresses, items purchased, and payment amounts. Payment card data is never stored by us — it is handled exclusively by Stripe or Paystack.
• •Usage analytics — anonymised information about how you use the dashboard, such as pages visited and features used, to help us improve the platform.

We do not collect information beyond what is necessary to operate the platform.

2 How We Use It

• •To create and maintain your merchant account and storefront.
• •To process payments and route transactions through Stripe or Paystack.
• •To send transactional emails — such as order notifications and account alerts — via Resend.
• •To provide customer support and respond to your enquiries.
• •To improve the platform through anonymised usage analytics.
• •To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal data to third parties or use it for advertising purposes.

3 Who We Share It With

We share your data with the following trusted third-party service providers, strictly to operate the platform:

• •Supabase — our database and storage provider. Your store data, product images, and order records are stored on Supabase infrastructure, subject to their data processing agreement.
• •Stripe / Paystack — payment processors. When you connect a payment method, relevant business and banking information is shared with Stripe or Paystack to enable payment processing. Each is subject to their own privacy policy.
• •Resend — our email delivery provider. Your email address and order-related data is passed to Resend solely to deliver transactional emails on your behalf.

We do not share your data with any other third parties unless required to do so by law or legal process.

4 Data Retention

We retain your account data and store records for as long as your account is active. We may also retain certain data as required by law or for legitimate business purposes such as dispute resolution.

When you close your account, your storefront goes offline immediately. Your data is retained for 30 days to allow you to request an export. After that period, all personal data associated with your account is permanently deleted from our systems, subject to legal retention requirements.

5 Your Rights

Under Nigeria's Data Protection Act 2023 (NDPA) you have the following rights regarding your personal data:

• •Access — you may request a copy of the personal data we hold about you.
• •Correction — you may update or correct inaccurate data directly in your dashboard settings, or contact us for data we hold that you cannot update yourself.
• •Deletion — you may request deletion of your account and personal data by closing your account from the dashboard or emailing us.
• •Portability — you may request an export of your store data in a machine-readable format before closing your account.

To exercise any of these rights, email us at support@vezstora.com. We will respond within 2 business days.

6 Cookies

Vezstora uses cookies solely for authentication purposes. When you log in to your dashboard, a secure session cookie is created to keep you authenticated during your session. This cookie is deleted when you sign out or your session expires.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not share browsing behaviour with advertising networks.

7 Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Email: support@vezstora.com
We aim to respond within 2 business days.