Privacy Policy

Last updated: June 2026

Vendorfy is a community-powered vendor trust platform. We take your privacy seriously. This policy explains what data we collect, why we collect it, and how you can control it. We comply with the Nigeria Data Protection Regulation (NDPR) and applicable data protection laws.

1. Who We Are

Vendorfy is an online platform that allows users to search for and submit reviews about vendors operating on social media platforms including Instagram, TikTok, WhatsApp, and Twitter/X. We operate the website at Vendorfy.ng and provide an API for developers and businesses.

For data-related enquiries, contact us at: privacy@Vendorfy.ng

2. What Data We Collect

We collect only what is necessary to operate the platform:

Community reviewsWhen you submit a review, we store your verdict (legit/scammed), your optional comment, and an optional evidence URL. Reviews are anonymous — we do not store your name or identity.
Hashed IP addressesTo prevent spam and abuse, we store a one-way hash of your IP address when you submit a review. This hash cannot be reversed to identify you. It is used only to enforce submission limits (max 3 reviews per vendor per IP).
API key registrationsIf you request an API key, we collect your business name and email address. We store a hashed version of your API key — never the raw key itself.
API usage logsWe log API calls (endpoint, vendor handle queried, timestamp) for billing, rate limiting, and abuse prevention. Logs are retained for 90 days.
Vendor handlesWhen a vendor is searched, we create a record of their handle and platform. This is publicly available information. We do not store personal information about vendors beyond their public handle.

3. What We Do NOT Collect

We want to be explicit about what we do not do:

  • ✓We do not collect your name, phone number, or email when you submit a review
  • ✓We do not track you across websites or use advertising cookies
  • ✓We do not sell your data to third parties
  • ✓We do not store raw API keys — only a one-way hash
  • ✓We do not scrape or store personal data about vendors from external platforms
  • ✓We do not use your data for profiling or automated decision-making about you personally

4. How We Use Your Data

We use the data we collect for the following purposes:

  • •To calculate and display vendor trust scores
  • •To prevent spam and abuse on the platform
  • •To enforce API rate limits and billing
  • •To send your API key to your email (one-time only)
  • •To improve the accuracy of our trust scoring model
  • •To detect coordinated fake review activity

5. Community Reviews and Vendor Data

Reviews submitted on Vendorfy are community opinions. They reflect the personal experiences of individual users and do not represent the views of Vendorfy.

Vendor handles are publicly available social media identifiers. By searching a vendor, a public record is created on our platform. Vendors may request removal of their record if it contains inaccurate information by contacting us at privacy@Vendorfy.ng.

We reserve the right to remove reviews that violate our community guidelines, including reviews that are false, defamatory, or submitted in bad faith.

6. Data Sharing

We do not sell, rent, or trade your personal data. We may share data only in the following limited circumstances:

  • •With Supabase (our database provider) — data is stored on their infrastructure under their data processing agreement
  • •With law enforcement if required by Nigerian law or a valid court order
  • •In anonymised, aggregated form for platform statistics (e.g. total reviews submitted)

7. Your Rights (NDPR)

Under the Nigeria Data Protection Regulation, you have the following rights:

Right to accessRequest a copy of any personal data we hold about you.
Right to erasureRequest deletion of your data. For reviews, note that they are anonymous — we cannot identify which reviews belong to you without additional information.
Right to correctionRequest correction of inaccurate data we hold about you.
Right to objectObject to how we process your data in certain circumstances.

To exercise any of these rights, contact us at privacy@Vendorfy.ng. We will respond within 30 days.

8. Data Retention

  • •Community reviews — retained indefinitely to maintain trust scores, unless removal is requested
  • •Hashed IP addresses — retained for 90 days then deleted
  • •API keys — retained until you request deletion
  • •API logs — retained for 90 days then automatically deleted

9. Security

We take reasonable technical measures to protect your data including encrypted connections (HTTPS), hashed API keys and IP addresses, Row Level Security on our database, and service role keys that are never exposed to the browser.

No system is 100% secure. If you discover a security vulnerability, please report it responsibly to security@Vendorfy.ng.

10. Cookies

Vendorfy does not use advertising cookies or tracking pixels. We may use essential session cookies required for the platform to function. We do not use Google Analytics or any third-party analytics that track you across sites.

11. Changes to This Policy

We may update this policy as the platform evolves. We will update the date at the top of this page when changes are made. Continued use of Vendorfy after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions, requests, or complaints contact us at privacy@Vendorfy.ng. We aim to respond within 30 days.

Vendorfy — Keeping Nigerian commerce safer, one review at a time.