Privacy Policy

We collect information in three ways:

• Information you give us — your name, email address, phone number, password, account type, and, if you build a brand page, business details such as your business name, category, location, description, logo, products, services, and links.
• Content you create — posts, messages, inquiries, reviews, community activity, and images you upload.
• Information collected automatically — technical and usage data such as your IP address, device and browser type, pages viewed, and actions taken, collected through cookies and similar technologies (see section 6).

Payments are handled by Paystack. When you pay, your card or bank details go directly to Paystack — we never see or store your full card number. We keep only limited records such as a payment reference, plan, amount, and status.

• to create and operate your account and provide the Service;
• to display your brand page, storefront, and public content to others;
• to process subscriptions and payments and send transaction confirmations;
• to send verification codes, service notifications, and, where you allow it, updates;
• to keep the Service safe — detecting, preventing, and responding to fraud, abuse, and security threats;
• to understand usage and improve our features;
• to comply with our legal obligations.

Where the Nigeria Data Protection Act applies, we process your information on the basis of: performing our contract with you (to provide the Service); your consent (for example, optional marketing); our legitimate interests (such as security and improving the Service); and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time.

We do not sell your personal information. We share it only:

• with service providers who help us run Straep — for example Paystack (payments), our image host, our email/SMTP provider, our hosting and content-delivery providers, and error-monitoring tools — under agreements that limit how they may use it;
• publicly, for the content you choose to make public (your brand page, posts, and profile are visible to others by design);
• when required by law, or to protect the rights, safety, and property of Straep, our users, or the public;
• in a business transfer, such as a merger or acquisition, in which case we will notify you.

We use essential cookies to keep you signed in and to keep the Service secure (for example, your session and a refresh token). Our infrastructure and content-delivery provider may set cookies needed to route and protect traffic. We do not use third-party advertising cookies. You can control cookies through your browser, but disabling essential cookies may stop parts of the Service from working.

We protect your data with encryption in transit (HTTPS), hashed passwords, access controls, and an automated security layer that watches for suspicious activity. No online service can be completely secure, so we cannot guarantee absolute security — but we work to protect your information and will notify you and the relevant authorities of a breach where the law requires.

We keep your information for as long as your account is active and as needed to provide the Service. After you delete your account, we remove or anonymise your personal information within a reasonable period, except where we must keep certain records (for example payment or tax records) to meet legal obligations or resolve disputes.

Subject to applicable law, you have the right to access, correct, update, or delete your personal information, to object to or restrict certain processing, to withdraw consent, and to request a copy of your data. You can update most information in your settings or delete your account from your dashboard. For any other request, email support@straep.com. You also have the right to complain to the Nigeria Data Protection Commission.

Straep is not intended for anyone under 18, or under the age of majority in your jurisdiction. We do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.

Straep operates from Nigeria, and some of our service providers may process data in other countries. Where we transfer personal information across borders, we take steps to ensure it remains protected in line with applicable law.

We may update this Privacy Policy from time to time. We will change the “Last updated” date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service means you accept the updated policy.

For privacy questions or to exercise your rights, contact us at support@straep.com or through our contact page.