At Diaspora Connect, we are committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our Platform, in accordance with the Nigeria Data Protection Regulation (NDPR), General Data Protection Regulation (GDPR), and other applicable data protection laws.
1. Information We Collect
We collect information that you provide directly to us, including:
- Personal Data: Name, email address, phone number, country of origin, and country of residence.
- Authentication Data: Passwords, OTP verification codes, and transaction security PINs.
- Verification Scan files: Identity documents, passports, or professional licenses (renamed securely via UUID structures to prevent security leaks).
- Transaction Logs: Transaction histories, contract details, and payment release confirmations.
2. How We Use Your Information
We process your data to fulfill our contract with you and meet legal requirements, including to:
- Create, verify, and secure your user or provider profile.
- Detect, prevent, and mitigate fraud, spam, or security incidents (including checking KYC documents for duplications).
- Process payments, manage escrow custody, and complete billing workflows.
- Send critical transactional alerts, SMS messages, and Expo mobile push notifications.
3. Data Sharing and Transfers
We do not sell your personal data. We share your information only with trusted third-party services necessary for platform operations, including:
- Payment gateways (e.g., Flutterwave) for processing cashouts.
- Cloud storage and databases (e.g., Appwrite) for hosting verification documents.
- Transactional email and push notification dispatchers.
- Compliance authorities if required by law or to enforce our financial regulations.
4. Cookie Consent
We set secure, `HttpOnly` cross-subdomain session cookies (e.g., access and refresh tokens) to keep you securely signed in as you navigate between our subdomains. By registering or using the Platform, you consent to our use of these essential functional cookies.
5. Data Retention
We retain your personal information for as long as necessary to provide services to you, comply with our legal obligations, resolve disputes, and enforce our security policies.
6. Your Rights
Depending on your location, you may have the right to access, correct, delete, or restrict the processing of your personal data. To exercise any of these rights, please contact us.
7. Security Measures
We implement robust security controls, including TLS encryption, JWT authentication, and secure UUID filename masking, to safeguard your data. However, no electronic transmission or storage system is 100% secure, and we cannot guarantee absolute security.
8. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please reach out to us at privacy@mydiasporaconnect.org.