Privacy Policy (NDPR Compliant)

1. Information We Collect

Patron complies strictly with the Nigeria Data Protection Regulation (NDPR). To provide discount-membership verification, we collect:

• Full Name, Email Address, and Phone Number.
• Selected Town and State location for local discount matching.
• User Identification Photo for visual in-person redemption verification.
• Merchant business registration details, CAC number, and representative contacts.

2. Photo Data & Retention Policy

User photos are stored securely in Supabase Storage and compressed to WebP format with all EXIF metadata stripped. Photos are used exclusively for visual redemption verification by authorized merchants.

To prevent photo-swap identity fraud, profile photos are subject to a 60-day update cooldown. All photo modifications are logged in our audit history.

3. Right to Data Deletion

Under NDPR guidelines, every Patron user has the absolute right to request full deletion of their personal data and profile.

You can initiate a deletion request at any time from your Dashboard Settings. Once approved, all user data, redemption logs, and photo uploads will be permanently purged within 30 days.