Privacy Policy

1. Our Commitment to Privacy

At GraceFolio, a product of Semper Technologies Ltd. (RC 9571901), we are committed to respecting your privacy and protecting the information you share in our Christian content directory. This Privacy Policy explains what data we collect, why we process it, how long we keep it, who helps us process it, and how public visibility works across author storefronts.

We process personal data in line with the Nigeria Data Protection Act, 2023 (NDPA) and other applicable privacy laws where they apply.

2. Data We Collect

We collect account details such as your name, email address, password authentication records, verification records, author slug, author bio, profile photo, location, social links, WhatsApp phone number, and settings you choose to save.

We also collect book listing information such as book titles, descriptions, prices, formats, genres, cover images, custom slugs, report records, support tickets, billing state, subscription events, payment references, page-view analytics, WhatsApp checkout clicks, and basic security logs needed to protect accounts.

3. Lawful Basis for Processing

We rely on contract necessity to create your account, publish your storefront, manage your subscription, deliver support, and provide the dashboard features you request.

We rely on consent where you choose to upload a public profile photo, publish a WhatsApp checkout number, receive verification or account emails, or make optional profile information public. You may withdraw optional consent by editing your profile or asking us to remove the relevant data.

We rely on legitimate interests to secure the platform, prevent abuse, moderate reported listings, compile author analytics, improve reliability, and protect the Christian content covenant of the service. We rely on legal obligation where we must retain billing, tax, compliance, fraud-prevention, or dispute records.

4. Public Directory Visibility & Communications

Profile Visibility: To enable direct-to-reader discovery, active book listings, prices, author bios, profile images, author roles, and public social links may be shown under their respective Author URLs and Book URLs.

WhatsApp Chat Consent: By adding your WhatsApp phone number to your author profile, you consent to the generation of pre-filled WhatsApp checkout links. When readers tap the WhatsApp checkout button, they leave GraceFolio and open WhatsApp or a Meta-controlled WhatsApp web flow to start a direct transaction chat with you. GraceFolio does not log, read, or intermediate those private WhatsApp conversations.

5. Storage, Processors & Sub-processors

GraceFolio stores account profiles, book listings, reports, verification records, payment state, support tickets, and analytics events in our Convex database. User sessions are managed with secure HTTP-only cookies and database-backed session records.

We use carefully selected service providers to run the platform. These include Convex for database and backend functions; UploadThing for image uploads and file delivery; Resend for transactional email; Paystack for Nigerian Naira subscription payments; Flutterwave for supported non-Naira card payments; WhatsApp/Meta when a reader opens an author's WhatsApp checkout link; OpenAI for automated content moderation and administrative AI review; and Vercel or equivalent hosting infrastructure for deployment and delivery.

These providers process data only for the service purpose assigned to them. They do not own author content or receive permission to sell GraceFolio user data.

6. Retention Period

We keep account, storefront, listing, and uploaded image data for as long as your account remains active or as long as needed to provide the service. If you delete your account or request deletion, we remove or de-identify public profile and listing data within a reasonable operational period unless we need to keep limited records for law, fraud prevention, safety, payment reconciliation, or dispute handling.

Support tickets, report records, billing references, and administrative audit records may be retained for up to six years where needed for compliance, accounting, fraud prevention, or legal claims. Short-lived verification, reset, and session records are kept only for security and account-access purposes. Backups may retain deleted information for a limited period before they are overwritten.

7. Your NDPA Rights

If you are a data subject under the NDPA, you may request access to your personal data, correction of inaccurate data, deletion where applicable, restriction or objection to processing, and a portable copy of data you provided to us where technically feasible.

You also have the right to be informed about processing that affects you, to withdraw optional consent, and to complain to the Nigeria Data Protection Commission (NDPC) if you believe your privacy rights have been violated.

Privacy Contact & Requests

To exercise privacy rights or ask questions about account management, contact Semper Technologies Ltd. at 6, Edwin Amadi Street, Enugu, Nigeria, email support@gracefolio.app, or use our Contact Form.