1. Who we are, and who else is responsible
247Store. Email: support@247store.site. We decide how personal data is used to run the 247Store platform.
When you buy from a store, that store (the seller) also receives your order details, chats and messages so it can sell to you and deliver. The seller is responsible for how it uses what it receives from you. We process that data on the platform for the seller and for ourselves, as described here.
2. What we collect
Sellers:
- account details: name, email, an optional phone number, and your password (kept only in scrambled form), or your Google sign-in;
- store details: name, description, logo, banner, products, prices, photos, delivery areas, policies and settings;
- verification details: your bank account details for payouts and, when you verify your identity, the name and last four digits of your BVN, the result of the check and the consent you gave. A live selfie is sent to our identity provider to match your BVN and is not kept by us;
- channel details if you connect one: the access token or bot token you give us, kept encrypted.
Buyers:
- account details: name, email, an optional phone number, and your password (kept only in scrambled form);
- order details: items, delivery address, delivery notes and order history;
- your conversations with the store’s AI sales agent, including voice notes (which are turned into text) and photos you send, and your messages in any case you open, with the photos you attach;
- reviews you write.
Everyone:
- payment information: our payment provider handles card and bank details and gives us the status, reference and amount of a payment. We do not receive or store your full card number;
- technical data: your device’s IP address (used for security and rate limiting), the devices you are signed in on, and basic logs;
- visit counts: we count store visits with a one-way code that changes each day, not with advertising cookies. Bots are ignored. This tells a seller how many people visited and which products were viewed, not who they were;
- messages you send us for support.
3. How we use it
- to run the service: create accounts, show stores, take and fulfil orders, process payments and payouts, and handle cases and refunds;
- to verify sellers before they take payments, and to prevent fraud and abuse;
- to power the AI sales agent that answers buyers for the seller;
- to send service emails, such as verification codes, receipts, order and case updates, and seller alerts. A seller may send offers to buyers who subscribed; each carries an unsubscribe link;
- to give sellers statistics about their own store;
- to give support, keep the service safe, fix problems and improve it using aggregate information;
- to meet legal duties, such as financial record keeping.
Our lawful bases are: performing our agreement with you, our legitimate interests in running and securing the service, your consent where we ask for it, and legal obligation.
4. The AI sales agent and your chats
To answer you, the agent sends the conversation, and any voice note or photo you share, to our AI provider (currently OpenAI), which returns the reply or the text of your voice note. The seller can read your chats with their store’s agent, take a chat over and reply themselves.
We do not use chats to train AI models unless the seller has chosen to allow it for their store. Please do not share card numbers, passwords or other sensitive details in a chat.
7. How long we keep it
We keep data while your account is active and as long as needed for the purposes above. When you delete your account, we remove or anonymise your personal data, except what we must keep, such as financial and tax records, records of cases and fraud checks, and what we need to defend a claim. A seller keeps its own records of orders it has taken.
8. How we protect it
Data is encrypted in transit. Passwords are stored scrambled, never in plain text. Channel tokens are stored encrypted. Access to systems is limited and sessions can be ended from your account. No system is perfectly secure. If a breach puts your rights at risk, we will tell you and the regulator as the law requires.
9. Your rights
You have the right to ask for a copy of your personal data, to have it corrected, to have it deleted, to limit or object to some uses, to receive it in a portable format where that applies, to withdraw consent you gave, and to object to decisions made only by automated means. You can change your details and delete your account in your account settings. For anything else, write to us at the address below. We will answer within the time the law sets.
If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission.
10. Children
247Store is not for anyone under 18, and we do not knowingly collect data from children. If you think a child has given us data, tell us and we will delete it.
11. Changes to this policy
We may update this policy. If a change matters, we will tell you by email or in your dashboard. The date at the top shows when it was last changed.
12. Contact us
Questions or requests about your data: 247Store. Email: support@247store.site.