Privacy Policy

1. Introduction

Velvet Africa Ltd ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding your data when you use our Platform.

By using Velvet Africa, you consent to the practices described in this policy. If you do not agree, please discontinue use of the Platform.

2. Information We Collect

Information you provide directly:

• Name, email address, phone number, and date of birth at registration
• Profile photos, bio, and service listings (for Creators)
• Payment information processed through our payment partners (we do not store card numbers)
• Messages, booking requests, and reviews you submit
• Identity verification documents (for Creator onboarding)

Information collected automatically:

• Device identifiers, IP address, browser type, and operating system
• Pages visited, features used, and time spent on the Platform
• Geolocation data when you grant permission (used for matching and transport fee calculation)
• Push notification tokens (for in-app and mobile notifications)

3. How We Use Your Information

• To create and manage your account and verify your identity
• To process bookings, payments, and withdrawals
• To match you with relevant Creators based on location, preferences, and history
• To send transactional notifications (booking confirmations, payment receipts, OTPs)
• To provide customer support and resolve disputes
• To enforce our Terms of Service and prevent fraud and abuse
• To improve the Platform through analytics and usage patterns
• To send promotional communications (you may opt out at any time)

4. Information Sharing

We do not sell your personal data. We may share your information with:

• Service providers: Payment processors (Pesapal), SMS providers (Africa's Talking), cloud infrastructure, and analytics partners who process data on our behalf under strict confidentiality agreements
• Other users: Your display name, profile photo, and rating are visible to other users. Your contact details are only shared with confirmed booking counterparties
• Law enforcement: When required by applicable law, court order, or government authority
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity

5. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter to comply with our legal obligations, resolve disputes, and enforce our agreements. Booking records and financial data are retained for at least 7 years for tax and regulatory compliance.

When you delete your account, we will remove your personally identifiable information within 30 days, except where retention is required by law.

6. Cookies and Tracking

We use session cookies and local storage to maintain your login state and preferences (e.g., Data Saver mode). We do not use third-party advertising cookies. You may disable cookies in your browser settings, but this may affect Platform functionality.

7. Your Rights

Subject to applicable law, you have the right to:

• Access: Request a copy of the personal data we hold about you (available via Data Export in Settings)
• Correction: Update inaccurate data through your account settings
• Deletion: Request deletion of your account and associated data via Settings → Danger Zone
• Portability: Export your data in machine-readable format (JSON/ZIP) from your account settings
• Objection: Object to processing of your data for marketing purposes

To exercise any of these rights, contact us at privacy@velvetafrica.com.

8. Data Security

We implement industry-standard security measures including encrypted connections (HTTPS), hashed password storage (bcrypt), and role-based access controls. Media files uploaded by Creators are served through an authenticated proxy and are not publicly accessible without a valid session.

Despite our best efforts, no system is completely secure. We encourage you to use a strong, unique password and to enable two-factor authentication in your account settings.

9. Children's Privacy

Our Services are strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has registered on the Platform, please contact us immediately and we will take appropriate action.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notification. Your continued use of the Platform following the update constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related inquiries or complaints, please contact our Data Protection Officer: