Privacy Policy

1. Who we are

Maicro ("we", "our", "the Platform") operates a white-label savings, Adashi, installment, and agreements management platform for businesses across Nigeria. This Privacy Policy explains how we collect, use, store, and protect personal data.

2. Data we collect

We collect the following categories of data:

• Vendor registration data: business name, owner name, phone, email, city and state, and optionally CAC registration number.
• Customer data: names, phone numbers, email addresses, gender, location, and any notes or tags entered by the Vendor.
• Transaction records: contribution amounts, dates, and account activity entered by Vendors on behalf of their customers.
• Authentication data: encrypted passwords and session tokens.
• Technical data: IP addresses, device type, and browser information collected automatically when you use the Platform.

3. How we use your data

We use personal data to:

• Provide and maintain the Platform's functionality.
• Enable Vendors to manage their customers, accounts, and transactions.
• Enable customers to view their own records through the customer portal.
• Send account-related communications such as password reset links and invitations.
• Detect and prevent fraud or misuse of the Platform.
• Comply with legal obligations.

4. Data sharing

We do not sell personal data. We share data only in the following circumstances:

• Within the Platform: Vendors can access the data of their own customers. Customers can access only their own records.
• Service providers: We use third-party infrastructure providers (including cloud hosting and database services) under data processing agreements. These providers process data only as instructed by us.
• Legal requirements: We may disclose data if required by Nigerian law or by order of a competent court or regulatory authority.

5. Data retention

We retain Vendor and customer data for as long as the Vendor's account is active and for a reasonable period thereafter for legal and audit purposes. Vendors may request deletion of their account and data by contacting us.

6. Security

We implement technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include encrypted connections (HTTPS), role-based access controls, and secure password storage. No system is completely secure; we cannot guarantee absolute security.

7. Your rights

You have the right to access, correct, or request deletion of personal data we hold about you, subject to applicable law. Customers seeking to exercise these rights should contact the Vendor that manages their account. Vendors may contact us directly.

8. Cookies

The Platform uses session cookies strictly necessary for authentication. We do not use tracking cookies or third-party advertising cookies.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify Vendors of material changes via the Platform. Continued use after notification constitutes acceptance.

10. Contact

For privacy-related enquiries, contact us via the registration form on the home page.