Privacy Policy

1. Comprehensive Information Collection

We collect a broad spectrum of data when you register and actively use the platform to power your e-commerce operations. This includes:

• Identity & Contact Verification: Full legal name, active email address, verified phone numbers, and alternative contact methods.
• Business Meta-Data: Legal business names, operating addresses, geolocation tags, shipping radius, designated shipping regions, and operating hours.
• Product Inventory Data: Product names, descriptions, pricing, variants, SKU numbers, stock counts, and all associated media assets.
• Staff Management Telemetry: Email addresses, names, and RBAC permissions of staff members. We track IP addresses and action logs to prevent unauthorized access.
• Extensive Financial Data: Encrypted wallet balances, transaction ledgers, payout history, and subscription billing histories. Scale does not store raw credit card PAN data; these rest with our PCI-DSS compliant payment gateway partners.
• CRM Data: Granular details of customers who purchase from your storefront, including names, phone numbers, delivery addresses, purchase histories, and lifetime value metrics.
• Identity Verification (KYC): Regulatory documents such as NIN, International Passports, CAC certificates, or utility bills required strictly for store verification and AML compliance.

2. Core Objectives of Data Utilization

We leverage your data strictly to enable seamless technical connections between your business and your customers. Specifically, we utilize your data to:

• Host and render your branded storefront efficiently.
• Calculate real-time shipping fees and optimize delivery logistics.
• Process secure wallet payouts rapidly across Nigerian banks.
• Verify your legal business identity against government databases.
• Provide detailed analytics dashboards representing your sales volume over time.
• Ensure continuous platform integrity through automated fraud-detection algorithms.

We strictly do not sell your information, nor do we use your CRM data for personalized advertising campaigns directed at your customers.

3. Privacy Dynamics: Staff and CRM Customers

Your Customers (CRM): As a Scale store owner, you operate legally as the "Data Controller" for Customer Data accumulated from your buyers. Scale acts strictly as your "Data Processor." You must ensure you have the legal right and explicitly obtained consent to collect and process your customers' shipping and contact details for fulfillment purposes.

Your Staff: Scale cryptographically protects the login credentials, passwords, and personal data of any staff members you invite to the platform. We monitor their actions exclusively to maintain access logs, ensuring you can audit which staff member fulfilled an order or withdrew funds.

4. Secure Processing of KYC Identity Data

Vendor KYC data is aggregated solely to confirm the authenticity and legal identity of your business operating on Scale. This sensitive data is transmitted exclusively via TLS encryption and handled securely for fraud prevention protocols.

Critical Disclosure: In the explicit case of formally reported fraudulent activities, chargeback abuses, scam disputes, or legally binding warrants, your verified vendor identity details will be surrendered directly to the relevant law enforcement agencies (e.g., Nigerian Police Force, EFCC) for immediate investigation and prosecution.

5. Long-Term Data Retention and Purging

Your active store parameters, listed products, and dynamic user data remain active until you explicitly execute a permanent account deletion request, or after extended periods of inactivity exceeding 1 year.

Sensitive KYC data is temporarily retained for a maximum of 6 months from your last validation cycle before requiring renewal. Once the rotation window closes, these documents are permanently digitally shredded from our cloud instances.

Aggregate financial transaction records, invoices, and ledger settlements are indefinitely archived securely in strict accordance with national financial accounting legal requirements.

6. Information Security Posture

We enforce an uncompromising security posture across the Scale infrastructure. Your network interactions are protected by modern encryption algorithms in transit (HTTPS/TLS) and strongly encrypted at rest. Databases housing your financial ledgers and product lists are locked behind private subnets and multi-factor authentication guardrails. While we strive to natively protect your commercial digital assets, no system is hypothetically impenetrable, and we legally disclaim absolute liability in the event of unpredictable zero-day cloud infrastructure attacks.

7. Contact Us

If you have inquiries regarding this Privacy Policy, wish to request a data export, or formally invoke your NDPA right to be forgotten, please reach out to our legal division at: info@getscale.ng.