Privacy Policy & Data Protection
Nigeria Data Protection Regulation (NDPR) & Commercial Communications Compliance
1. Overview & Scope
ShopPal provides an automated conversational commerce platform enabling Nigerian retail merchants to showcase products, engage prospective shoppers, and accept secure payments via WhatsApp and Paystack. We take privacy seriously and adhere strictly to the Nigeria Data Protection Act (NDPA) and NDPR standards.
2. Information Collected
- Merchant Credentials: Business name, email, phone number, and bank account for automated settlements.
- Customer Order Telemetry: WhatsApp customer phone numbers, cart items, delivery notes, and Paystack reference tokens.
- Chat Transcripts: WhatsApp dialog between customers and the AI agent for order fulfillment only. We do not sell or monetize personal customer transcripts.
3. Payment Gateway Security
All financial transactions and card data are handled through Paystack Payments Limited, a PCI-DSS certified processor. ShopPal never stores or logs merchant or customer debit card CVVs or PINs.
4. Merchant Rights & Data Deletion
Merchants retain full ownership of their product catalogs, images, and sales records. You may export your catalog or permanently wipe your account at any time via Settings.