Umarn.
← Back to Home
Privacy & Data Protection

Privacy Policy

Last Updated: July 2026NDPR CompliantWhatsApp Business API
01

Data We Collect

Umarn ("we", "our", or "the Platform") collects only the minimal personal information necessary to deliver seamless campus commerce via WhatsApp.

  • Buyers: WhatsApp phone number, display name, email address (for Paystack receipts), saved delivery hostel/zone pins, and order history.
  • Vendors: Business name, contact phone, catalogue data, bank account payout details, and KYC verification documents (government ID & selfie).
  • Riders: Full name, phone number, vehicle type, delivery route records, payout account details, and government identity document.
02

How We Use Your Information

We process your information strictly for operational marketplace execution:

  • Automating order placement, stock updates, and checkout status messaging on WhatsApp
  • Routing dispatch riders to your pinned delivery location
  • Processing Paystack payments and holding escrow funds safely
  • Delivering weekly WhatsApp sales and performance analytics to verified vendors
  • Verifying identity during registration to prevent fraud across campus
03

Meta WhatsApp API & Message Privacy

Umarn operates via the official Meta WhatsApp Business API Cloud Platform.

Message Content Guarantee

Messages sent to the Umarn bot are parsed automatically by our backend server to execute orders. We never store personal chat histories beyond transaction logs, nor do we ever sell, rent, or trade your phone number or messaging data to third-party advertisers.

04

Encrypted KYC Storage & Security

Vendor and rider identity documents (government IDs, passports, student IDs) are stored in isolated private storage buckets using S3 encryption with strict, non-public Access Control Lists (ACLs).

Public access to private identity documents is strictly blocked. Only authorized compliance personnel can access temporary, signed URLs for identity verification during onboarding.

05

NDPR Compliance & Data Rights

Umarn complies fully with the Nigeria Data Protection Regulation (NDPR). Under NDPR, you possess the following explicit data rights:

  • Right to Access: Request a full copy of all personal data linked to your WhatsApp number.
  • Right to Rectification: Update or correct your profile details, delivery location, or bank payout account.
  • Right to Erasure: Request complete permanent deletion of your account and transaction history.
06

Data Erasure & Account Deletion Protocol

To initiate complete account and data deletion:

  1. Send a WhatsApp message saying DELETE MY DATA to the Umarn bot.
  2. Our automated compliance engine will verify your request and remove your personal profile and linked location data within 48 hours.
07

Privacy Support & Contact

Have a Privacy Concern or Data Request?

Message our dedicated Privacy Compliance Officer on WhatsApp.

Contact Privacy Officer on WhatsApp