Privacy Policy

Velorely is a marketplace connecting clients with beauty and wellness professionals in Nigeria.

[OPERATOR TO COMPLETE] Registered legal entity name, registered address, and RC/CAC number.

We collect the following categories of personal data, depending on how you use Velorely:

• Account and contact information: full name, phone number, role (client, professional or agent), and profile photo.
• Location: shop address and coordinates, for professionals who list a physical location.
• Identity and financial-eligibility information (professionals only): tax ID, and for professionals using guarantor-backed financial features, a guarantor's name, phone number, National Identification Number (NIN), and date of birth. NIN verification is performed through VerifyMe, a third-party identity verification provider.
• Health and safety information (clients, optional): known allergies, scalp sensitivity level, skin type, and any notes you add to your health profile, used to warn you and professionals about product ingredients that may affect you.
• Booking and service history: services booked, appointment times, prices, payment status, and reviews.
• Payment information: processed by Paystack (card/bank payments) and Klump (buy-now-pay-later); Velorely does not directly store your full card or bank account numbers.
• Messages and calls: the content of in-app chat messages and metadata about voice calls (participants, duration, outcome) between a client and a professional who have a real booking relationship. Message content is automatically scanned for patterns that indicate an attempt to move payment or contact off the platform (see "Automated processing" below).
• Photos and portfolio content: images you upload, including AI Style Match reference photos and professional portfolio images.
• Device and usage information: IP address, browser/device information, and how you interact with the app, collected automatically.

We do not collect more identity/financial detail (tax ID, guarantor information) than a given feature actually requires — this data is only requested from professionals who use the specific features that need it.

• To create and manage your account, and to connect clients with professionals for booking.
• To process payments and hold them in escrow until a booking is completed.
• To verify professional identity and guarantor information for financial features (tax reserve, loan eligibility), where you have opted into those features.
• To warn you and professionals about known allergens in products, based on your health profile, if you choose to add one.
• To enable booking-related communication (chat and calls) between a client and professional with a real booking relationship.
• To send booking confirmations, reminders, and safety alerts via WhatsApp or SMS.
• To detect and deter attempts to bypass the platform's escrow protection (see "Automated processing" below).
• To generate AI-assisted style recommendations, if you use AI Style Match.
• To maintain the security and integrity of the platform, including detecting fraud and abuse.

Chat messages are automatically scanned by a pattern-matching system for phone numbers and phrases associated with attempts to arrange payment or contact outside the platform. A first detection masks the specific matched text and logs it; repeated detections may temporarily restrict a professional's account features or route the account to human review. This system does not use the content of your messages for any purpose beyond this specific check, and does not read or act on message content that doesn't match these patterns.

If you use AI Style Match, photos you upload are sent to a third-party AI provider (OpenAI) to generate style suggestions.

We share personal data with the following categories of third-party service providers, only as needed to provide the platform:

• Payments: Paystack (card/bank payments), Klump (buy-now-pay-later).
• Identity verification: VerifyMe (NIN verification for guarantor-backed features).
• Messaging: Meta (WhatsApp Business Platform) and Sendchamp (SMS), for booking notifications and reminders you're sent outside the app.
• Voice calling: Twilio, which provides network relay infrastructure (TURN) so in-app voice calls can connect reliably; Twilio relays call audio but the call itself is between you and the other participant.
• AI processing: OpenAI, for AI Style Match and related image-based features.
• Live streaming: Mux, for professionals using the live-streaming feature.
• Maps and address lookup: Google Maps, for address autocomplete.
• Infrastructure: Supabase, which hosts our database, authentication, and file storage, and Vercel, which hosts the application itself.

We do not sell personal data to third parties. Some of these providers may process data outside Nigeria.

[OPERATOR TO COMPLETE] Confirm each processor's data location(s) and whether any cross-border transfer safeguards required under the NDPA apply.

[OPERATOR TO COMPLETE] Exact retention periods for each data category (account data, booking history, chat/call records, health profile data, identity/guarantor documents), and what happens to data after account deletion.

Under the Nigeria Data Protection Act, you generally have the right to access the personal data we hold about you, request that inaccurate data be corrected, request deletion of your data (subject to legal or legitimate business retention needs), object to certain processing, and lodge a complaint with the Nigeria Data Protection Commission.

You can review and update most of your own account, health profile, and guarantor information directly from your dashboard at any time.

We restrict access to sensitive personal data (such as phone numbers, tax ID, and guarantor information) at the database level so it is only reachable through your own authenticated session or by authorized administrative processes — not returned in general profile lookups. Payment card details are handled directly by our payment processors and are not stored on our servers. Data in transit is encrypted (HTTPS).

[OPERATOR TO COMPLETE] Confirm the intended minimum age for using Velorely and the corresponding policy language.

We may update this policy as the platform changes. Material changes will be reflected by a new version number at the top of this page.

[OPERATOR TO COMPLETE] A real contact — name/role and email — for data protection requests and complaints, and confirmation of NDPA/NITDA registration status if applicable.