Privacy Policy

1. Introduction

Your money is safe with Emani — and so is your information. This policy explains what we collect, why, and who we share it with when you use Emani and SafeCheckout. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA).

2. What we collect

• Buyers: your name, phone number (verified by a one-time code), email address, delivery address, order details, and your wallet and payment history. Buyers sign in with a one-time code — we don't store a buyer password.
• Vendors: the above, plus your business name and category, social media handle, account password, and the bank account details you add for payouts.
• Verification: for vendors, we may request BVN, NIN, or CAC registration details to verify business legitimacy and meet our partners' requirements.
• Disputes and support: the messages, photos, and other evidence you submit.

3. How we use your information

• To run SafeCheckout: collect payments, hold money safely, and pay vendors out.
• To create and manage the dedicated payment accounts that hold your money.
• To deliver orders, send you updates by SMS, WhatsApp, or email, and resolve disputes.
• To verify identity, prevent fraud, and meet legal and regulatory obligations.
• To improve the product — for example, enhancing vendors' product photos.

4. Who we share it with

We do not sell your personal information. We share only what each service needs to do its job:

• Paga — our licensed payment partner. Holds the money in SafeCheckout and wallets, and processes vendor payouts. Receives buyer name, phone number, and email to open the dedicated account that holds your money, and vendor bank details to send payouts.
• Paystack — verifies bank account details (bank list and account-name lookup) when a vendor adds a payout account.
• Twilio and Meta (WhatsApp) — deliver one-time codes and order updates by SMS and WhatsApp.
• Resend — delivers our emails (receipts, order updates, dispute notices).
• PushNDeliver — our delivery partner. Receives the buyer's name, phone number, and delivery address for orders shipped through them.
• UploadThing — stores images that vendors and buyers upload (product photos, dispute evidence).
• OpenAI — processes vendors' product photos for image enhancement, and helps organize dispute evidence. AI never makes dispute decisions — humans do.
• Infrastructure providers — the cloud services that host our database and systems.
• The other party to your transaction — during a dispute, evidence relevant to the order is shared between the buyer and the vendor.
• Authorities — where the law requires it.

5. How long we keep it

We keep your information while your account is active. Records of payments, wallet movements, and disputes are kept for as long as financial-record and anti-fraud laws require, even after an account closes. When we no longer need information, we delete it.

6. Data security

We protect your data with industry-standard measures: encrypted connections, signed and verified payment notifications, and access limited to the people who need it. No system is perfectly secure, so if we ever discover a breach that affects you, we'll tell you and the regulator as the NDPA requires.

7. Your rights

Under the NDPA you can ask to see the personal data we hold about you, correct it, or have it deleted (subject to the records we're required to keep). Email support@emani.app and we'll respond. If you're not satisfied, you can complain to the Nigeria Data Protection Commission.

8. Changes and contact

If we change this policy in a way that matters, we'll tell you before it takes effect. Questions? Contact us at support@emani.app.