Phosnur Privacy Policy

1. Information We Collect

When you register as a vendor on Phosnur, we collect basic business information necessary to build and display your catalogue:

• Account Credentials: Email address, name, and a salted password hash.
• Store Profile: Store name, custom subdomain handle, bio, brand logo, and Instagram handle.
• Contact Info: Nigerian WhatsApp phone number (used exclusively so customers can message you directly).
• Optional Bank Display: Bank name, account number, and account name. These are shown to shoppers only when enabled by an eligible plan and switched on in your dashboard.
• Store Activity: Store views, product views, WhatsApp order-link clicks, and optional source labels such as Instagram or QR code. These are event counts, not unique visitor or confirmed-order counts.
• Service Security: Session identifiers and IP-derived hashes used for rate limiting. The application does not store the raw IP address in its analytics events.

2. How We Use and Protect Your Data

• We use account and catalog data to operate vendor dashboards and public stores, process image uploads, secure the service, and report storefront activity.
• Storefront visitors are sent to WhatsApp when they contact a vendor. Their WhatsApp conversations are handled by WhatsApp and the vendor, outside Phosnur.
• We do not sell personal data. Infrastructure and storage providers process data to host the application, database, and uploaded images.
• Passwords are salted and hashed; staff cannot retrieve the original password.

3. Data Retention & Deletion

Product deletion removes the product and its associated catalog records. A self-service account deletion flow is not currently available; account deletion requests must be handled by Phosnur support. Store activity is retained in the database until removed as part of service operations. Vendors should not publish bank or contact details unless they intend to make them public.