Plain language commitment: this policy explains what data Standeva collects, why we collect it, and what you can do about it.
1. Who We Are
Standeva is an AI buying agent platform operated from Nigeria. For data protection purposes, Standeva is the data controller responsible for your personal data.
For questions about data handling, contact [email protected].
2. What Data We Collect
- WhatsApp number: order updates, delivery confirmations, and follow-up messages.
- Chat messages: understanding requests and responding accurately.
- Images and videos: identifying products you want to buy or list.
- Voice notes: transcribed so Standeva can process voice requests.
- Location details: finding sellers near you and quoting delivery.
- Transaction data: completing purchases, receipts, and dispute resolution.
- Seller profile data: verification, trust scores, and buyer confidence.
- Device and browser data: diagnostics and performance.
We do not collect BVN, NIN, bank credentials, or payment card details. Payment details should be handled by a licensed payment partner such as Paystack.
3. How We Use Your Data
- To deliver the service, including requests, product search, purchases, and seller listings.
- To send order updates through WhatsApp and related channels.
- To build and maintain trust scores for sellers.
- To improve Standeva using anonymised and aggregated usage patterns.
- To comply with Nigerian law and lawful regulatory requests.
Standeva is designed to be ad-free. We do not use your data for third-party advertising.
4. Who We Share Your Data With
- Payment partners, to process and hold payments where applicable.
- Logistics partners, to arrange delivery using only the information needed for delivery.
- AI infrastructure providers, to power the conversational layer under appropriate data protection agreements.
- Nigerian regulatory authorities, where disclosure is legally required.
We never sell your personal data.
5. Retention
- Conversation history: normally retained for 12 months unless a transaction or dispute is active.
- Transaction records: retained for financial record-keeping requirements.
- WhatsApp number: retained while your account is active and deleted after a valid deletion request.
- Uploaded media: deleted after it is no longer needed for the request.
- Trust score data: retained while the seller account is active.
6. Your NDPR Rights
- Right to access your personal data.
- Right to correct inaccurate or incomplete data.
- Right to request deletion where legally available.
- Right to data portability.
- Right to object to certain processing.
- Right to withdraw consent where consent is the legal basis.
To exercise these rights, email [email protected] with the subject line Data Request. We aim to respond within 30 days.
7. Data Security
- Encryption in transit using modern TLS.
- Access controls for personal data.
- Security reviews of infrastructure and providers.
- No storage of payment card details on Standeva systems.
No system is completely secure. If you believe your data has been compromised, contact [email protected].
8. Children
Standeva is not intended for anyone under 18. If we learn that a child has provided personal data, we will delete it promptly.
9. Cookies and Browser Data
The browser interface may use minimal storage to maintain session state and remember mode selection. We do not use third-party tracking cookies or advertising pixels.
10. International Transfers
Some AI infrastructure providers may process data outside Nigeria. Where this occurs, we require safeguards that protect data to an appropriate standard.
11. Changes and Contact
We may update this policy as Standeva grows or regulations evolve. Material changes will update the date on this page.
For privacy questions, email [email protected].