Privacy Policy

1. Introduction

Corra ("we," "our," or "us") provides tools for merchants to build and operate online stores and for customers to browse and purchase products. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our websites, applications, and related services (collectively, the "Services").

2. Information we collect

• Account data: name, email address, password hash, and profile details you provide when you register or update your account.
• Store and transaction data: product listings, orders, payments metadata, shipping details, and communications sent through the platform.
• Technical data: IP address, device and browser type, general location derived from IP, and usage logs (pages viewed, actions taken) to operate and secure the Services.
• Payment information: payments are processed by third-party providers (such as Paystack). We do not store full card numbers on our servers; we may receive limited payment status and reference data from those providers.

3. How we use information

We use the information we collect to:

• Provide, maintain, and improve the Services;
• Process transactions, send receipts, and provide customer support;
• Detect, prevent, and address fraud, abuse, and security issues;
• Send service-related notices and, where permitted, marketing communications you can opt out of;
• Comply with legal obligations and enforce our terms.

4. Sharing of information

We may share information with service providers who assist us (hosting, email delivery, analytics, payment processing), subject to appropriate safeguards. We may disclose information if required by law or to protect our rights, users, or the public. If we are involved in a merger or acquisition, your information may be transferred as part of that transaction.

5. Data retention

We retain information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the type of data and applicable law.

6. Security

We implement technical and organizational measures designed to protect your information. No method of transmission or storage is completely secure; we encourage you to use strong passwords and protect your account credentials.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. You may also have the right to lodge a complaint with a supervisory authority. To exercise these rights, contact us using the details below.

8. Cookies and similar technologies

We use cookies and similar technologies to remember your preferences, keep you signed in, understand how the Services are used, and improve performance and security. You can control cookies through your browser settings; disabling cookies may affect functionality.

9. International transfers

Your information may be processed in countries other than your country of residence. Where we transfer data across borders, we take steps consistent with applicable law to ensure appropriate protection.

10. Children

The Services are not directed at children under the age required by applicable law to consent to data collection. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may be communicated through the Services or by email where appropriate.

12. Contact

For privacy-related questions or requests, contact us at corrasupport@vellory.io.