Privacy Policy

1. Scope

This policy explains how Nivo handles personal data for sellers, buyers and visitors. Nivo processes data in line with the Nigeria Data Protection Regulation and the Nigeria Data Protection Act 2023. Where you run a store on Nivo, you act as an independent controller of your buyers' order data, while Nivo acts as processor for hosting, checkout, payments and notifications.

2. Data Nivo Collects

Sellers. Name, email, phone number, business details, branding assets, bank account details for payouts, and records of plans and billing.

Buyers. Name, phone number, email address, delivery address and order contents provided at checkout. Payment card or bank details go directly to licensed payment providers. Nivo never stores full card numbers.

Visitors. Store views, product views, cart events and checkout events used for store analytics. This data is aggregated and never sold.

3. How Data Is Used

• Create and secure accounts, including email verification codes.
• Run storefronts, checkout, payments, delivery and order notifications.
• Send order updates by email and WhatsApp where the buyer opts in.
• Show sellers analytics about their own stores.
• Prevent fraud, enforce terms and meet legal duties.

4. Sharing

Nivo shares data only where needed to run the service: payment providers to process payments, messaging providers to deliver order notifications, and infrastructure providers for hosting and storage. Buyer order details are visible to the seller they bought from. Nivo does not sell personal data and does not share data for third party marketing.

5. WhatsApp and Email Notifications

Buyers choose at checkout whether to receive order updates by WhatsApp. Replying STOP opts the number out permanently, and Nivo stops all WhatsApp order messages to it. Sellers receive new order alerts on the business phone number and owner email address.

6. Storage and Security

Data is stored on secured infrastructure with encrypted connections, access controls and credentialed payment secrets. Bank account numbers and payment secrets are stored encrypted. No method is perfect, so Nivo monitors for incidents and will notify affected users where the law requires it.

7. Retention

Account and order records are kept while an account is active and for a reasonable period after closure to meet tax, accounting and dispute duties. Analytics events are kept in aggregated form. You may request deletion of your account data through support, subject to records Nivo must legally retain.

8. Your Rights

Under NDPR and the NDPA you may request access, correction, deletion, portability and restriction of your personal data, and you may withdraw consent for optional messages at any time. Nivo responds to verified requests within the timelines the law sets.

9. Cookies

Nivo uses strictly necessary cookies and local storage for login sessions, carts and wishlists. Storefront analytics rely on first party events. Nivo does not run third party advertising trackers on stores.

10. Changes and Contact

Material changes to this policy appear on this page with a new date. Questions or requests about personal data belong to the support channel inside your dashboard.