Privacy Policy

Effective date: 2026-07-30   Last reviewed: 2026-07-30

CodeElveza operates CodeElveza and acts as the data controller for personal data processed to provide the marketplace. This policy applies to visitors, buyers, sellers, administrators, support contacts and people who interact with our services.

1. Personal data we collect

• Account data: name, email address, password hash, role, profile information and communication preferences.
• Seller and payout data: business details, identity or verification records, tax information, encrypted payout details and seller-review records.
• Transaction data: cart, order, licence, purchase code, invoice, refund, commission, withdrawal and payment-reference information. Payment-card details are normally processed by the selected payment provider rather than stored by CodeElveza.
• Product and support data: uploaded files, screenshots, documentation, product metadata, reviews, messages, support requests and dispute evidence.
• Technical and security data: IP address, browser and device details, session identifiers, login history, download history, audit logs, cookies, security events and diagnostic logs.
• Communications: messages sent to us, email delivery records and records of consent or policy acceptance.

2. Sources of personal data

We receive data directly from you, automatically from your device, from sellers or buyers involved in a transaction, from payment and identity-verification providers, and from public or lawful third-party sources used for fraud prevention, compliance or dispute resolution.

3. Purposes and lawful bases

• Contract: create accounts, process orders, deliver licences and downloads, provide seller tools, calculate earnings, manage payouts and provide requested support.
• Legal obligation: maintain financial and tax records, respond to lawful requests, prevent prohibited transactions and meet data-protection, consumer-protection and other regulatory duties.
• Legitimate interests: secure the platform, prevent fraud and abuse, moderate content, improve products, measure performance and protect users and intellectual property, where those interests are not overridden by your rights.
• Consent: optional marketing, non-essential cookies and any processing for which consent is required. You may withdraw consent without affecting earlier lawful processing.

4. Payment processing

When you select a payment provider, necessary order and identity information is sent to that provider. Its privacy notice governs its independent processing. CodeElveza records transaction references, verification responses, status and reconciliation information but should not store full payment-card numbers or security codes.

5. Sharing and disclosure

We may share the minimum necessary data with sellers or buyers involved in a transaction, payment providers, banks, email and hosting providers, security and fraud-prevention services, identity-verification providers, professional advisers, auditors, insurers, regulators, law-enforcement bodies and a purchaser or successor in a legitimate business reorganisation. Service providers must process data under appropriate confidentiality and security obligations. We do not sell personal data.

6. International transfers

Some providers or users may be located outside Nigeria. Where personal data is transferred internationally, we will use a lawful transfer mechanism and reasonable safeguards, such as adequacy decisions, contractual protections, consent where valid, or another mechanism permitted by applicable data-protection law.

7. Retention

• Account records are retained while the account is active and for a reasonable period afterwards for security, dispute and legal purposes.
• Order, payment, invoice, commission, payout and tax records may be retained for the period required by applicable financial and tax law.
• Security, audit and access logs are retained according to configured retention periods and may be kept longer where an investigation requires it.
• Unsuccessful identity documents, expired tokens and unnecessary support attachments should be deleted or anonymised when no longer required.
• Backups are rotated according to the backup-retention schedule and protected from ordinary access.

8. Security

We use measures appropriate to the risk, including password hashing, encryption of selected sensitive fields, role-based access, CSRF protection, secure session controls, audit logs, restricted private storage, download tokens, backups and monitoring. No internet service is completely secure, so users must also protect credentials, devices and downloaded source code.

9. Your data-protection rights

Subject to applicable law and exemptions, you may request access, correction, deletion, restriction, objection, data portability, information about processing, withdrawal of consent and review of certain automated decisions. You may also complain to the Nigeria Data Protection Commission or another competent supervisory authority. We may verify identity before acting on a request and may retain information where law or a compelling legitimate obligation requires it.

10. Children

CodeElveza is intended for persons aged 18 or older. We do not knowingly create marketplace accounts for children below the permitted age. Contact us if you believe a child has provided personal data unlawfully.

11. Cookies

We use essential cookies and similar technologies for authentication, carts, security and preferences. Optional analytics or advertising technologies will be used only where enabled and legally permitted. See the Cookie Notice for details and controls.

12. Automated checks

CodeElveza may use rules or risk signals to identify suspicious logins, transactions, uploads, downloads or accounts. Significant enforcement decisions should include appropriate human review where required by law.

13. Changes to this policy

We may update this policy to reflect changes in law, technology or marketplace operations. Material changes will be communicated through the service or by email where appropriate.

14. Contact and complaints

Send privacy questions or rights requests to privacy@codeelveza.com. Postal contact: CodeElveza, Nigeria. You may also contact the Nigeria Data Protection Commission where you believe your rights have not been respected.