Privacy Policy

1. Introduction

StoreFlex ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding it.

Platform: https://storeflex-front.up.railway.app
Contact: johnadekola676@gmail.com

This policy applies to:

• Business owners ("Merchants") who register on StoreFlex
• Customers ("Buyers") who purchase through StoreFlex storefronts or our Telegram bot

2. What Data We Collect

2.1 Data You Provide Directly

From Merchants (Business Owners):

• Full name
• Email address
• Phone number
• Business name, category, and description
• Bank account details (account number, bank name) — used only for Paystack subaccount setup
• Logo and product images
• Telegram chat ID (if you connect the admin notification feature)

From Customers (Buyers):

• Full name
• Phone number
• Email address
• Delivery address (if you choose delivery)
• Telegram user ID and chat ID (when ordering via Telegram bot)
• Order history and purchase amounts

2.2 Data We Collect Automatically

When you visit our website or use our platform, we automatically collect:

• IP address
• Browser type and version
• Device type (mobile, desktop)
• Pages visited and time spent
• Referring website
• Session recordings (via Microsoft Clarity — see Section 4)
• Clickstream data and interaction events (via PostHog and Google Analytics 4)

2.3 Cookies and Tracking

We use cookies and similar tracking technologies. See our Cookie Policy for full details.

3. Why We Collect Your Data

We do not sell your personal data to third parties. We do not use your data for advertising.

4. Third-Party Services We Use

We share data with the following third parties to operate the platform:

All third-party services are required to handle your data in accordance with their own privacy policies.

5. How Long We Keep Your Data

6. Your Rights

You have the following rights regarding your personal data:

Right to Access — You can request a copy of all personal data we hold about you.

Right to Correction — You can update your personal information via your account settings or by contacting us.

Right to Deletion — You can request that we delete your personal data. We will comply within 30 days, subject to legal retention requirements (e.g. payment records we must keep for 7 years).

Right to Portability — You can request your order and account data in a machine-readable format (CSV or JSON).

Right to Withdraw Consent — For data processed on the basis of consent (e.g. analytics cookies), you can withdraw consent at any time via our Cookie Settings.

To exercise any of these rights, contact us at: johnadekola676@gmail.com

We will respond within 30 days.

7. Data Deletion

Merchants

To delete your account and all associated data:

1. Contact us at johnadekola676@gmail.com with the subject "Account Deletion Request"
2. We will confirm your identity and process the deletion within 30 days
3. Note: Payment records may be retained for up to 7 years as required by law

Customers

To request deletion of your customer data (name, phone, email, order history):

1. Contact us at johnadekola676@gmail.com with the subject "Customer Data Deletion Request"
2. Include the phone number or email used when placing orders
3. We will process your request within 30 days

8. Data Security

We take data security seriously. Measures we have in place include:

• All data transmitted over HTTPS (TLS encryption)
• Database secured with Row Level Security (RLS) via Supabase
• Service role keys (database admin credentials) never exposed to browsers
• Passwords handled by Supabase Auth (we never store plaintext passwords)
• Payment card details never stored by StoreFlex — handled entirely by Paystack
• Regular security reviews of our codebase

Despite these measures, no system is 100% secure. If we become aware of a data breach that affects your data, we will notify you within 72 hours.

9. Children's Privacy

StoreFlex is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify Merchants via their registered email address. The "Last updated" date at the top of this page will always reflect the most recent version.

11. Contact Us

For privacy-related questions or to exercise your rights:

Email: johnadekola676@gmail.com
Platform: https://storeflex-front.up.railway.app

StoreFlex — Built for Nigerian businesses.