Privacy Policy
Last updated: October 5, 2026
This policy explains what personal data Pevora collects, why, who we share it with, and your rights under the Nigeria Data Protection Act 2023 (NDPA). Pevora is the data controller. Contact: support@mypevora.com [or a dedicated privacy email].
1. Data we collect
| What | Examples | From |
|---|---|---|
| Account details | Name, email, phone number, password (stored encrypted) | You |
| Addresses | State, city, delivery zone, street address, landmark notes | You |
| Orders | Items, prices, order history, delivery status, messages about orders, photos you upload for a dispute | You and vendors |
| Payment records | Amount, payment reference, payment and refund status | Paystack |
| Vendor details | Business name, base location, delivery areas, listings, and later bank account and identity details for payouts | Vendors |
| Technical data | Device and browser type, IP address, login times, error logs | Your device |
| Notification data | Push notification subscription, if you allow notifications | Your device |
Pevora does not see or store your full card details. Card payments are processed by Paystack.
2. Why we use it
| Purpose | Legal basis under the NDPA |
|---|---|
| Creating your account and processing orders, payments, deliveries and refunds | Performance of a contract |
| Sending order updates by email and push notification | Performance of a contract; consent for push notifications |
| Resolving disputes and preventing fraud | Legitimate interests |
| Keeping the platform secure and fixing problems | Legitimate interests |
| Keeping financial records | Legal obligation |
| Marketing messages, if we send any | Consent, which you can withdraw at any time |
3. Who we share it with
We share only what each party needs:
- Vendors receive your name, phone number, delivery address and order details so they can fulfil your order.
- Delivery partners receive your name, phone number and delivery address for that delivery.
- Paystack processes payments and refunds.
- Supabase hosts our database and user accounts.
- Vercel hosts our website.
- Resend sends our emails.
- Authorities, where required by law or to protect someone's safety.
We do not sell your personal data.
4. Data stored outside Nigeria
Some of our providers store data on servers outside Nigeria, in Ireland and the United States. Where data leaves Nigeria, we rely on safeguards permitted under the NDPA, such as the provider's contractual data protection commitments.
5. How long we keep it
- Account details (name, email, phone, addresses): while your account is open, and up to 12 months after you close it.
- Order, payment, refund and earnings records: 6 years, for tax and accounting. If you close your account, we keep these records but remove your name, phone number and address from them.
- Technical logs: up to 90 days.
- Marketing consent records: for as long as we send you marketing, plus a record of when you opted in or out.
6. Your rights
Under the NDPA you can ask us to:
- give you a copy of your personal data
- correct inaccurate data
- delete your data, where we are not required to keep it
- restrict or object to certain uses
- give you your data in a portable format
- withdraw consent, such as for push notifications or marketing
Email support@mypevora.com to make a request. We will respond within 30 days. You can also complain to the Nigeria Data Protection Commission (NDPC).
7. Security
We protect your data with encrypted connections, access controls that limit who can see what, and secure payment handling through Paystack. No system is completely secure. If a breach puts your rights at risk, we will notify you and the NDPC as the law requires.
8. Age
Pevora is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn we have, we will delete it.
9. Cookies
We use only the cookies and browser storage needed to keep you logged in and make the site work. [Update if analytics or advertising tools are added.]
10. Changes
We may update this policy and will post the new version on mypevora.com with its date. For significant changes, we will notify you by email or in the app.