Privacy Policy

1. Introduction

Dealcova ("we", "us", "our") operates the Dealcova platform at dealcova.com and associated applications. We provide deal coordination and accountability tools for buyers and sellers in Nigeria.

2. Contact

For privacy-related questions or requests, contact privacy@dealcova.com or support@dealcova.com.

3. Information We Collect

• Account details: full name, email, phone number, and hashed password.
• Waitlist details: email address, selected role, submission timestamp, and related access data when you join the pre-launch waitlist.
• Identity verification data: BVN, full name, date of birth (DOB), phone number, gender, and verification outcome. BVN matching is carried out by Prembly.
• Funding and payout data: bank account details and Squad-designated funding-account details.
• Deal details, milestones, proof uploads, and dispute statements.
• Device and access data such as IP address, browser information, and activity timestamps.

4. Why We Collect It

We process personal data to:

• Create and maintain user accounts.
• Verify identity before unlocking restricted deal features.
• Process deals and resolve disputes fairly.
• Prevent fraud and satisfy legal or regulatory obligations.
• Manage the waitlist and send launch or early-access updates you request.
• Provide support and improve platform reliability.

5. Identity Verification and Data Minimization

Identity verification is mandatory before withdrawals, wallet funding access, and tracked deal participation. Our current verification flow requests BVN, full name, date of birth, BVN-linked phone number, gender, active contact phone number, and payout bank details because our verification and payout controls use those fields to match bank and identity records, reduce fraud, and support the checks required by our service providers.

We review this verification data set periodically with our compliance and backend teams. If a field is no longer necessary for identity verification, fraud prevention, or payout controls, we will remove it from the flow and update this policy.

6. Dispute Records and Audit Trail

When disputes are raised, the deal audit trail is stored in our database dispute log and internal records system for review and resolution. This includes timestamps, state changes, and submitted proof.

7. Data Sharing

• Squad by HabariPay receives the payment and account data needed to create Customer Virtual Account collection instructions, confirm transfers, and process approved payouts or refunds.
• Prembly receives the identity data required to match a BVN before identity-dependent features are unlocked.
• Support and helpdesk tools may receive contact details and enquiry history so we can respond to user requests and resolve complaints.
• The configured waitlist storage provider may receive your waitlist details and related access data to store entries and provide waitlist counts.
• Regulators, law enforcement agencies, fraud investigators, and professional advisers may receive relevant records where disclosure is legally required or necessary to protect rights, prevent abuse, or resolve disputes.

We do not sell your personal data to advertisers.

8. Cross-Border Transfers

Some service providers may process personal data outside Nigeria. Where that happens, we require contractual, operational, and technical safeguards intended to keep the data protected to a standard consistent with our legal obligations.

9. Retention Periods

• Account data: 7 years from account closure or last activity.
• Deal records: 7 years from deal completion date.
• Dispute records: 7 years from dispute resolution.
• Audit and security logs: 1 year, unless a longer period is required by law.
• Waitlist data: only as long as needed to manage pre-launch communications and legal obligations.
• Marketing preference data: 2 years from last interaction.

10. Data Security

• TLS/HTTPS for data in transit.
• Hashed passwords using one-way algorithms.
• Access controls and operational logging.
• Webhook integrity checks and idempotent transaction protections.

No system is completely risk-free. If we become aware of a personal data breach likely to create a material risk to users, we will investigate, contain the issue, and notify affected users and regulators where required by applicable law.

11. Your Rights

You may request access, correction, deletion (subject to legal retention duties), restriction, objection, and portability where applicable. You may also ask us to stop launch messages. Contact privacy@dealcova.com.

12. Children

Dealcova is not intended for persons under 18 years old. If a minor account is discovered, contact privacy@dealcova.com.