Domiverse emblemDOMIVERSE

Privacy Policy

Effective Date: 23 October 2026

Data Controller: My Domiverse Ltd (RC 8460697)

Contact: info@mydomiverse.com | +234 201 330 9656

My Domiverse Ltd ("Domiverse", "we", "us", or "our") operates the Domiverse platform. We are committed to protecting your personal data and respecting your privacy in accordance with the Nigeria Data Protection Act (NDPA) 2023 and applicable data protection regulations issued by the Nigeria Data Protection Commission (NDPC).

1. Personal Data We Collect

We collect only the minimum personal and business data necessary to provide our platform services:

  • Account Information: Full name, email address, Nigerian phone number, username, encrypted password hash (argon2id), selected roles (Customer, Vendor, Service Provider), referral code, and consent timestamps.
  • Customer Waitlist Preferences: Optional product and service interest categories, state, and Local Government Area (LGA).
  • Partner & Business Profile Data: Business name, business type, primary category, business description, state, LGA, street address (kept private during onboarding), service areas, business phone/WhatsApp number, years in business, website/social links, and Corporate Affairs Commission (CAC) registration number.
  • Listing Media: Business logos, cover images, product photographs, and service portfolio images. We automatically strip embedded EXIF metadata (such as GPS coordinates and camera serial numbers) upon upload.
  • Verification (KYC) Documents: Government-issued identification (NIN slip, Voter's Card, International Passport, or Driver's Licence), CAC certificate, professional licences, and proof of address submitted by vendors and service providers.
  • Technical & Session Data: IP address, browser user-agent string, and hashed session refresh tokens required to maintain secure login sessions and prevent unauthorized access.

2. Why We Collect Your Data and Legal Basis

Under the Nigeria Data Protection Act 2023, we process your personal data on the following lawful bases:

  1. Contractual Necessity: To create and manage your Domiverse account, onboard your business, review your listings, and prepare your account for marketplace transactions.
  2. Consent: When you explicitly accept our Terms and Privacy Policy at registration, or when you opt in to receive launch updates and marketing communications. You may withdraw marketing consent at any time in your Account Settings.
  3. Legal Obligation & Legitimate Interest: To verify business identities, prevent fraud, maintain platform security, and record administrative audit logs.

3. How Verification Documents Are Protected

Verification (KYC) documents uploaded by vendors and service providers are stored in a private, non-public storage bucket (`private-kyc`). They are never publicly addressable on the internet. Only authorized Domiverse verification reviewers can view these documents through temporary signed links that expire after five (5) minutes, and every access event is recorded in an immutable security audit log.

4. Data Sharing and Third Parties

We do not sell or rent your personal data to third parties. We only share data with trusted infrastructure providers necessary to operate Domiverse (such as transactional email delivery and secure cloud hosting) under strict confidentiality obligations, or when required by Nigerian law or a court of competent jurisdiction.

5. Data Retention

We retain your account and business profile data for as long as your account remains active on Domiverse so that your credentials, preferences, and verified listings carry seamlessly into marketplace launch and ongoing operations. Verification records and audit logs are retained as required for fraud prevention and regulatory compliance.

6. Your Rights Under the Nigeria Data Protection Act 2023

As a data subject under the NDPA 2023, you have the right to:

  • Access and Rectification: View and update your personal details, phone number, email address, and business information at any time from your dashboard and Account Settings.
  • Withdraw Consent: Toggle marketing communications off at any time in Account Settings.
  • Session Control: View active devices signed into your account and sign out all other sessions immediately.
  • Deletion / Erasure: Submit an account deletion request directly from your Account Settings or by emailing info@mydomiverse.com.

7. Contact Us

For any privacy inquiries, data subject requests, or questions regarding our compliance with the Nigeria Data Protection Act 2023, please contact:

My Domiverse Ltd (RC 8460697)

Email: info@mydomiverse.com

Telephone: +234 201 330 9656