Privacy Policy

Last updated: June 24, 2025

DalabNet ("we," "us," or "the Platform") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website, mobile application, and related services.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Full name, email address, phone number, and password.
  • Profile Information: Profile photo, delivery addresses, and saved preferences.
  • Merchant Information: Store name, description, business license, store logo, and business registration details.
  • Payment Information: Mobile money transaction references and SMS payment confirmations.
  • Communications: Messages sent through the in-platform chat system, customer support inquiries, and product reviews.

1.2 Identity Verification (KYC) Data

When applying for a merchant account, we collect:

  • Government-issued ID: Photograph of your national ID card or passport.
  • Face Verification: A selfie photo and liveness check video to confirm your identity matches your ID document.

1.3 Location Data

With your permission, we collect your GPS coordinates when you use the address picker feature. This data is used solely to set your delivery address and is not tracked continuously.

1.4 Automatically Collected Data

  • Device Information: Device type, operating system, browser type and version.
  • IP Address: Your internet protocol address for each session.
  • Usage Data: Pages visited, products viewed, search queries, time on site.
  • Security Logs: Login history, failed login attempts, account changes, and security events.

2. How We Use Your Information

  • Platform Operations: To provide, maintain, and improve the Platform and its features.
  • Transactions: To process orders, payments, and deliver notifications about your purchases.
  • Identity Verification: To verify merchant identities and prevent fraudulent accounts.
  • Communication: To facilitate buyer-seller messaging and send account-related notifications.
  • Security: To detect, prevent, and investigate fraud, unauthorized access, and abuse.
  • Location Services: To determine delivery addresses, improve search results, and prevent location-based fraud.
  • Analytics: To understand usage patterns and improve user experience.

3. KYC and Identity Verification Policy

We take the security of your identity documents seriously:

  • ID photographs and face verification data are used exclusively for identity verification purposes.
  • Verification is performed manually by authorized DalabNet staff. No automated decision-making is used.
  • KYC data is stored in encrypted form on secure servers with restricted access.
  • Access to KYC data is limited to authorized personnel only and is logged for auditing purposes.
  • KYC data is never sold, shared with, or disclosed to any third party except as required by law.
  • Deleting your account does not necessarily result in the immediate deletion of KYC data. We may retain it for up to 2 years after account closure for fraud prevention and legal compliance purposes.

4. In-Platform Chat and Communications

  • All buyer-seller communications occur through DalabNet's built-in messaging system.
  • Chat messages are stored securely and may be reviewed in case of disputes or reports of abuse.
  • Sharing external contact information (phone numbers, WhatsApp, Telegram, etc.) within chats is prohibited and may result in account suspension.
  • We do not read private messages unless a report is filed or fraudulent activity is detected.

5. Location and GPS Data

  • GPS access is requested only when you use the address picker feature.
  • We use your location to: set delivery addresses, improve local search results, and assist in fraud prevention.
  • We do not track your location continuously or in the background.
  • You can revoke GPS permission at any time through your device settings.

6. IP Address, Device, and Security Logs

We collect the following technical data:

  • IP address
  • Device type and identifier
  • Browser and operating system information
  • Login timestamps and history
  • Security event logs (e.g., password changes, suspicious login attempts)

This data is used exclusively for: fraud detection and prevention, unauthorized access prevention, abuse investigation, and protecting the Platform and its users.

7. Cookies and Tracking

We use the following cookies:

  • Session Cookies: To keep you logged in during your visit. Essential for Platform functionality.
  • Cart Cookies: To maintain your shopping cart contents.
  • Referral Cookies: To track referral links for our points and rewards program (stored for up to 30 days).
  • Security Cookies: CSRF tokens to protect against cross-site request forgery.

We do not use third-party advertising cookies or tracking pixels. All cookies used are essential for Platform operations.

8. Information Sharing

We share your personal information only in the following circumstances:

  • With Sellers: Your name and delivery address when you place an order, for delivery purposes only.
  • With Payment Processors: Transaction references to verify mobile money payments.
  • Law Enforcement: When required by law, court order, or to protect the safety of our users.
  • DalabNet Team: Authorized staff for customer support, dispute resolution, and fraud investigation.

We never sell your personal data to third parties.

9. Data Security

  • Passwords are hashed using industry-standard algorithms and are never stored in plain text.
  • All data transmission uses HTTPS/TLS encryption.
  • KYC documents are stored in encrypted form with access controls.
  • Database access is restricted and protected by firewalls.
  • Security logs are maintained to detect unauthorized access attempts.

While we implement robust security measures, no system is 100% secure. We encourage you to use strong passwords and keep your credentials confidential.

10. Your Rights

You have the right to:

  • Access your personal data through your profile settings.
  • Update your information at any time.
  • Delete your account by contacting support. Note: KYC data may be retained for up to 2 years for legal and fraud prevention reasons.
  • Opt out of non-essential notifications and communications.
  • Revoke GPS permissions through your device settings.

11. Data Retention

  • Account data: Retained while your account is active, deleted upon account closure.
  • KYC data: Retained for up to 2 years after account closure.
  • Transaction records: Retained for 3 years for legal and accounting purposes.
  • Security logs: Retained for 1 year.
  • Chat messages: Retained for 1 year after the last message in a conversation.

12. Children's Privacy

DalabNet is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we discover that a minor has created an account, we will promptly delete it and all associated data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via a notice on the Platform or through email. Continued use of the Platform after changes constitutes acceptance.

14. Contact Us

For privacy-related questions, data requests, or concerns, please contact us through our Help Center or email us at privacy@dalabnet.com.