Privacy Policy
Last updated: [placeholder — set when this policy is actually published]
This page explains what data Afrovia collects, why, and how you can control it. It is currently scaffolding — each section below is a placeholder for real, reviewed policy language, not the policy itself.
What data we collect
[Placeholder: list account data (name, email), profile data, business owner verification documents (government ID, selfie), booking/payment data, messages, and any location data collected. Be specific and complete — this section drives the rest of the policy.]
Why we collect it, and our legal basis
[Placeholder: state the GDPR legal basis for each category above — e.g. contract necessity for booking data, consent for verification documents and marketing, legitimate interest for fraud prevention. Match this to security-and-compliance.md's GDPR section.]
How long we keep it
[Placeholder: define retention periods per data category. Verification documents (government ID, selfie): delete the raw file once verification is approved, retain only a verified yes/no flag and audit trail, unless there is a specific legal reason to keep the original — per security-and-compliance.md, don't keep sensitive documents indefinitely 'just in case.']
Who we share it with
We share data with the following sub-processors, each handling a specific part of the service: Supabase (database and file storage), Vercel (hosting), Stripe (payments and payouts), Resend (transactional email), Twilio (WhatsApp notifications), Mapbox (maps), and PostHog (product analytics, only after you accept cookies). [Placeholder: add each vendor's role in more detail and confirm data processing agreements are in place before public launch — that confirmation is a business responsibility, not something this page can assert on its own.]
Verification documents
[Placeholder: explain that ID and selfie uploads are stored in a private location, accessed only by Afrovia's admin team for verification review, and are not used for any other purpose. Cross-reference the retention section above.]
Cookies & analytics
We use a cookie to remember your cookie-consent choice, and — only if you accept — PostHog to understand how Afrovia is used. You can change your choice at any time.
Your rights under GDPR
[Placeholder: list the rights EU users have — access, rectification, erasure, restriction, portability, objection — and how to exercise each one via the contact below.]
Requesting deletion of your data
To request deletion of your account and personal data, email the address below. We handle deletion requests manually — see our internal process for what this covers. [Placeholder: state the response-time commitment, e.g. within 30 days per GDPR.]
Contact
Questions about this policy or your data: support@afroviaconnect.com.
You can review or change your cookie choice at any time: . See also our Terms of Service.