Privacy Policy

1Introduction

Pavexflow Limited ("Pavexflow," "we," "our," or "us") is a digital commerce platform headquartered in Nigeria. We operate the website and platform accessible at pavexflow.com, enabling vendors to sell digital products and affiliates to earn commissions by promoting them.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, register for an account, or use any of our services. By accessing or using Pavexflow, you agree to the practices described in this policy.

If you do not agree with this policy, please do not access or use the platform. For questions or concerns, contact us at help@pavexflow.com.

2Information We Collect

2.1 Information You Provide Directly

When you register, use, or interact with Pavexflow, you may provide:

• Account information: full name, email address, phone number, and password.
• Identity verification (KYC): government-issued ID, business registration details, and other documents required to verify your identity and authorise payouts.
• Financial information: bank account details, account name, and sort codes provided for payout processing.
• Product information: product titles, descriptions, pricing, files, and media uploaded by vendors.
• Communications: messages, support tickets, and other correspondence you send to us.
• Profile information: profile photos, bios, and any other information you choose to add to your account.

2.2 Information Collected Automatically

When you use the platform, we automatically collect:

• Device and browser information: IP address, browser type and version, operating system, device identifiers.
• Usage data: pages visited, features used, clicks, session duration, and navigation paths.
• Transaction data: purchase records, commission records, payout requests, and access logs.
• Cookies and tracking technologies: session cookies, persistent cookies, and similar identifiers as described in Section 6.

2.3 Information from Third Parties

We may receive information about you from:

• Payment processors and financial institutions when processing transactions or verifying bank details.
• Identity verification services used during KYC processing.
• Analytics providers that help us understand platform usage.

3How We Use Your Information

We use the information we collect for the following purposes:

3.1 Platform Operations

• Creating and managing your account.
• Processing purchases, delivering digital products, and enrolling students in courses.
• Tracking affiliate referrals and calculating commissions.
• Processing payout requests to your verified bank account.
• Providing customer support and resolving disputes.

3.2 Identity and Compliance

• Verifying your identity through our KYC process as required by applicable financial regulations.
• Preventing fraud, money laundering, and other unlawful activity.
• Complying with applicable laws, regulations, and court orders.
• Maintaining records required for tax reporting purposes.

3.3 Platform Improvement

• Analysing usage patterns to improve platform features and performance.
• Conducting internal research and analytics.
• Diagnosing technical problems and resolving errors.

3.4 Communications

• Sending transactional emails (purchase confirmations, payout notifications, access credentials).
• Sending platform updates, security alerts, and policy change notifications.
• Sending marketing communications where you have opted in – you can unsubscribe at any time.

4Sharing of Information

Pavexflow does not sell your personal information. We do not allow third-party advertisers to access your data. We share information only in the following circumstances:

• Service providers: We share data with trusted third-party processors (payment processors, cloud hosting providers, analytics tools, identity verification services) strictly to operate the platform. These parties are bound by data processing agreements and may not use your data for their own purposes.
• Vendors and affiliates: When a buyer purchases a product, the vendor receives the information necessary to fulfil that order (such as the buyer's name and email). Affiliates receive aggregated performance data but not individual buyer personal information.
• Legal obligations: We may disclose information where required by law, regulation, or valid legal process (such as a court order or government request), or where necessary to protect the rights, safety, or property of Pavexflow, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction. You will be notified via email and/or a notice on the platform before your information becomes subject to a different privacy policy.

5Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the platform's services. Specifically:

• Account data is retained for the duration of your account and for a period of 5 years after account closure for legal and compliance purposes.
• KYC and identity documents are retained for a minimum of 5 years after your last transaction, as required under applicable anti-money laundering regulations.
• Transaction records are retained for 7 years for tax and financial audit purposes.
• Support communications are retained for 3 years.
• Usage and analytics data may be retained in anonymised or aggregated form indefinitely.

If you request account deletion, we will delete or anonymise your personal information within 30 days, except where retention is required by law or legitimate business necessity (such as outstanding disputes, fraud investigations, or regulatory obligations).

6Cookies & Tracking Technologies

Pavexflow uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage. The types of cookies we use are:

• Essential cookies: Required for the platform to function. These enable login sessions, security features, and core functionality. They cannot be disabled.
• Functional cookies: Remember your settings and preferences (such as language or display preferences) to personalise your experience.
• Analytics cookies: Collect information about how users interact with the platform to help us improve performance and usability. Data collected is aggregated and does not identify individual users.
• Affiliate tracking cookies: Used to attribute purchases to affiliate referrals. These are first-party cookies stored on the Pavexflow domain.

You can control non-essential cookies through your browser settings. Disabling cookies may affect some functionality of the platform. We do not use advertising or third-party retargeting cookies.

7Data Security

Pavexflow implements industry-standard technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or disclosure. These include:

• Encryption of data in transit using TLS (Transport Layer Security).
• Encryption of sensitive data at rest, including KYC documents and financial information.
• Access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis.
• Regular security assessments and monitoring of our systems.
• Secure deletion protocols for data that is no longer required.

While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that affects your rights or freedoms, we will notify you and relevant authorities as required by applicable law within 72 hours of becoming aware of the breach.

8Your Rights

Depending on your pathname, you may have the following rights regarding your personal information:

• Right to access: Request a copy of the personal information we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete information.
• Right to erasure: Request deletion of your personal information, subject to legal retention requirements.
• Right to restrict processing: Request that we limit how we use your information in certain circumstances.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing of your data for direct marketing or other purposes based on legitimate interests.
• Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at help@pavexflow.com. We will respond within 30 days. We may need to verify your identity before processing certain requests.

9Third-Party Links

The Pavexflow platform may contain links to third-party websites, tools, or services. These links are provided for convenience and do not constitute endorsement of the linked site or its content. Pavexflow has no control over, and accepts no responsibility for, the privacy practices or content of third-party sites.

We encourage you to read the privacy policy of any third-party site you visit through a link on our platform before providing any personal information to that site.

10Children's Privacy

Pavexflow is a commercial platform and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will delete it promptly.

If you believe a child under 13 has provided personal information to us, please contact us at help@pavexflow.com immediately.

11Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the 'Last Updated' date at the top of this page.
• Send an email notification to all registered account holders.
• Display a prominent notice on the platform for at least 14 days.

Your continued use of the platform after the effective date of the updated policy constitutes your acceptance of the changes. If you do not agree with the updated policy, you must stop using the platform and may request account deletion.

12Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us: