Privacy Policy

We ask for as little as we can, we tell you what we do with it, and we do not sell it. If anything below is unclear, write to us and we will explain it in plain words.

Effective date: [PLACEHOLDER — date the domain goes live] Last updated: [PLACEHOLDER — same date] Version 1.0

Before this page goes live Replace every [PLACEHOLDER] block on this page, then delete the dashed boxes and the .todo rule from the stylesheet above. A privacy policy containing the word PLACEHOLDER will fail Google OAuth review, and it is not a document you can rely on legally. Have a Nigerian lawyer read the finished version before you publish it.

1 Who we are

COBRAND ("we", "us", "our") is an AI-powered business growth platform operating from Ibadan, Nigeria. We are the data controller for the personal data described in this policy.

Trading nameCOBRAND

Registered entity[PLACEHOLDER — registered company name]

RC number[PLACEHOLDER — CAC registration number]

Registered address[PLACEHOLDER — full street address, Ibadan]

Privacy contactcobrandapgp@gmail.com

Data protection officer[PLACEHOLDER — name, or "not appointed"]

You must supply The registered company name, CAC/RC number and a real postal address. A Gmail address is acceptable while you are small, but a dedicated address such as privacy@cobrandapgp.com reads far better to both regulators and Google's review team, and you will own it once the domain is live.

2 What we collect

2.1 Information you give us

Account details — your name, email address and password. Passwords are never shown to us in readable form.
Business details — for sellers and publishers: business name, description, address, logo and product or book listings.
Contact details — a WhatsApp or phone number, where you choose to give one so customers can reach you.
Content you upload — product photographs, book files, articles, portfolio images and messages.
Verification material — where you apply for a verified badge or publisher status, the identity and business documents you send us.

2.2 Information collected automatically

Local storage — your basket, wishlist, theme choice and sign-in state are stored in your own browser, not on our servers.
Technical data — IP address, browser type and pages visited, recorded by our hosting provider in standard server logs.

What we deliberately do not collect. COBRAND does not run behavioural advertising trackers, does not build profiles of what you browse, and does not sell personal data to anyone, for any price.

2.3 Payment information

[PLACEHOLDER — describe your payment processor, for example Paystack or Flutterwave.] Card details are entered directly with the payment provider and are never stored on COBRAND servers. We keep only a reference to the transaction so we can show you your order history.

You must supply The name of your payment processor and a link to their own privacy policy. Until payments are wired up, say so plainly rather than describing a process that does not exist yet.

3 Why we use your data

To create and run your account, shop, publisher studio or professional profile.
To show your listings to customers and let them contact you.
To process orders and pass delivery details to the seller fulfilling them.
To verify businesses and professionals so the badge means something.
To answer your questions and provide support.
To detect fraud, abuse and prohibited listings.
To meet our legal and tax obligations in Nigeria.

4 Our legal basis

Under the Nigeria Data Protection Regulation 2019 (NDPR) and the Nigeria Data Protection Act 2023, we rely on the following bases: performance of a contract with you; your consent, where you have given it and which you may withdraw at any time; our legitimate interest in running a safe marketplace; and compliance with legal obligations.

5 Signing in with Google

Where you choose to sign in using Google, Google sends us a limited set of information: your name, your email address and your profile picture. We use it only to create and identify your COBRAND account.

We request the minimum scopes needed to sign you in, and nothing more.
We do not read, send or store your email messages, contacts, calendar or files.
We do not transfer Google user data to third parties except as required to run the service or by law.
We do not use Google user data for advertising, and we never sell it.
You can disconnect COBRAND at any time from your Google account permissions page.

Limited Use. COBRAND's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Keep this section accurate Google's reviewers compare this wording against the scopes your app actually requests. If you later request anything beyond basic profile and email, this section must be updated first, or review will fail.

6 Who we share data with

We share personal data only where it is needed to deliver the service:

Sellers and publishers — when you place an order, the seller fulfilling it receives the details needed to deliver it.
Buyers — when you operate a shop, your business name, listings and stated contact details are public.
Service providers — hosting, payment processing and email delivery. [PLACEHOLDER — name them: hosting provider, payment processor, email provider.]
Authorities — where we are legally required to disclose, or must act to prevent harm.

We do not sell personal data, and we do not share it for third-party advertising.

7 Cookies and local storage

COBRAND uses browser local storage rather than tracking cookies for your basket, wishlist, theme preference and sign-in state. This data stays in your browser, is readable only by this site, and is cleared when you clear your browser data. [PLACEHOLDER — if you later add analytics or advertising cookies, list them here with their purpose and retention, and add a consent banner.]

8 How long we keep it

Account data — while your account is open, and for [PLACEHOLDER — e.g. 12 months] after you close it.
Order and transaction records — [PLACEHOLDER — e.g. 6 years] to meet Nigerian tax and accounting requirements.
Verification documents — [PLACEHOLDER — state a period] after a decision is made.
Server logs — as retained by our hosting provider in the ordinary course.

9 Your rights

Under the NDPR you have the right to ask for a copy of your data, to correct it, to have it deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent at any time. To exercise any of these, email cobrandapgp@gmail.com. We respond within 30 days.

If you are not satisfied with our response, you may complain to the Nigeria Data Protection Commission (NDPC).

10 Security

We protect data with HTTPS in transit, restricted administrative access, and the security controls of our hosting provider. No system is perfectly secure; if a breach affects your personal data we will notify you and the NDPC as the law requires.

11 Children

COBRAND is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12 International transfers

Our hosting and service providers may process data outside Nigeria. Where that happens we rely on providers that offer protections equivalent to those required by the NDPR. [PLACEHOLDER — name the countries or regions once your hosting region is fixed.]

13 Changes to this policy

When this policy changes we update the date at the top of this page. For significant changes we will also tell you by email or with a notice on the site.

14 Contact us

Questions about this policy, or about your data:

Emailcobrandapgp@gmail.com

Postal address[PLACEHOLDER — full address]

Phone / WhatsApp[PLACEHOLDER — business number]