This is a draft prepared for legal review before publication — it is not a substitute for qualified legal counsel, particularly regarding Nigeria's NDPR compliance and any jurisdictions Qhello serves outside Nigeria.
1. Who we are
Qhello is a product of Vercura Systems ("we," "us," "Qhello"), based in Enugu State, Nigeria. This policy explains what information we collect, why, and how it's handled.
2. Information we collect
From account owners:
- Phone number (used to verify your identity via one-time code, and as your primary account identifier)
- Email address (optional, used for account recovery and order confirmations)
- Nickname / display name (what appears on your card and profile)
- Social links you choose to connect (WhatsApp, Instagram, LinkedIn, etc.)
- Card design preferences and order details (tier, delivery address, payment reference)
From people who scan a Qhello card:
- By default, scans are logged anonymously — we record that a scan happened, when, and against which card, but not who the scanner is.
- If you choose to submit your phone number after scanning (to request your own Qhello, or in response to a personalized card interaction), we store that number only with your explicit action — never automatically.
Security logging:
We log IP addresses and request details for failed or invalid card lookups (e.g. guessed or mistyped card links), separately from normal scan activity, in order to detect and prevent abuse. This data is retained for a limited period and is not used for any other purpose.
Payment information:
- Card payment details (card number, CVV, etc.) are entered directly into our payment processor Flutterwave's secure interface and never pass through or get stored on Qhello's own servers.
- We retain only the transaction reference, amount, and status needed to confirm and record your order.
Location/region:
We infer your general region from your phone number's country code, used solely to determine applicable pricing currency. We do not track real-time or precise location.
3. How we use information
- To create and operate your account and physical card(s)
- To process and fulfill card orders
- To send order confirmations, OTP codes, and (with your consent) SMS about products or offers relevant to you
- To detect and prevent fraudulent or abusive activity
- To improve the product based on aggregate, non-identifying usage patterns
4. Gifting — a special case
If someone orders a Qhello card as a gift for you, the person gifting provides a name/persona for your card before you've created an account or agreed to anything. At that point, no phone number, email, or password exists yet — only a card design tied to a claim link. Your account is only created, and your information only collected, once you personally scan the claim link and complete phone verification. Until then, the gifter's information (their own account) is processed under this same policy; yours is not collected at all.
5. Who we share information with
- Flutterwave — for payment processing (see their own privacy policy for how they handle payment data)
- Termii — for SMS delivery (OTP codes, opt-in notifications)
- We do not sell your information to third parties, and we do not share it for advertising purposes.
6. Your rights
You can:
- Access, correct, or delete your account information at any time via your dashboard
- Deactivate or regenerate any physical card, which disconnects it from your profile
- Opt out of SMS communications at any time
- Request a copy of the data we hold about you, or its deletion, by contacting us at [contact email]
7. Data retention
- Account data is retained while your account is active, and for a limited period after deletion as required for legal/financial record-keeping (e.g. transaction records)
- Security/abuse logs are retained for [30–90 days], then deleted
- Anonymous scan analytics may be retained indefinitely in aggregate form, without identifying individual scanners
8. Children
Qhello is not directed at, and should not be used by, anyone under [18 / applicable age under Nigerian law — confirm with counsel].
9. Changes to this policy
We'll update the date at the top of this page when this policy changes, and notify account owners of material changes.
10. Contact
Vercura Systems, Enugu State, Nigeria
[contact email]