Privacy & Data Ledger

We collect merchant profile data, transaction metadata, and buyer-submitted evidence (receipts). For security, we generate SHA-256 cryptographic hashes of uploaded files to prevent duplicate fraud attempts.

We track scan events and user-agent strings to provide merchants with intelligence on customer intent and conversion performance.

All data is stored via AES-256 encrypted infrastructure provided by Supabase. Merchant credentials and private API keys are stored in isolated environment variables and never exposed to the client side.

We do not sell data. Information is only shared with verified payment partners (e.g., Paystack) to facilitate transaction verification or when required by Nigerian regulatory authorities.