1. Information We Collect
When you register and use the Vivatera Global platform, we collect:
- Identity data: Full name, username, date of birth, gender, profile photo.
- Contact data: Email address, phone number, home address, state, city, country.
- Financial data: Bank account details (bank name, account number, account name) for withdrawal purposes.
- Transaction data: Order history, wallet credits/debits, bonus records, withdrawal requests.
- Technical data: IP addresses, login timestamps, browser/device information for security purposes.
- Usage data: Pages visited, actions taken within the platform (activity log).
2. How We Use Your Information
- To create and manage your distributor account.
- To process orders, calculate and pay bonuses, and process withdrawal requests.
- To send transactional emails (welcome, bonus credit, withdrawal status, verification).
- To detect and prevent fraud, abuse, and unauthorised access.
- To comply with legal obligations.
- To improve the platform based on usage patterns (anonymised where possible).
3. Data Sharing
We do not sell your personal data to third parties. We may share data with:
- Payment processors: Bank details shared with banking partners solely for processing your withdrawal requests.
- Email service providers: Your email address and name are shared with our SMTP provider to deliver transactional emails.
- Legal authorities: Where required by Nigerian law or valid court order.
4. Data Security
- Passwords are stored using bcrypt hashing (cost factor 12) - they are never stored in plain text.
- All sessions use secure, HTTP-only cookies with CSRF protection.
- Bank account numbers are stored in the database and only displayed to the account owner and platform administrators.
- Access to the admin panel is restricted to authorised staff only.
- All sensitive configuration (DB credentials, SMTP passwords) is stored server-side and never exposed to browsers.
5. Data Retention
We retain your personal data for as long as your account is active. Upon account closure or termination:
- Financial records (orders, bonuses, withdrawals) are retained for 7 years for regulatory compliance.
- Personal profile data may be anonymised after 2 years of account inactivity.
- Activity logs are retained for 12 months.
6. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update inaccurate personal data via your Profile page.
- Deletion: Request account deletion (subject to financial record retention requirements).
- Portability: Request your transaction history in CSV format (available via the Transactions page).
To exercise these rights, submit a support ticket via the platform.
7. Cookies
This platform uses one essential session cookie (VG_SESSION) to maintain your login state. No advertising or tracking cookies are used. The session cookie is HTTP-only, SameSite=Strict, and expires after 2 hours of inactivity.
8. Children's Privacy
This platform is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has registered, please contact us immediately via the support ticket system.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered members of material changes via email and platform notification. Continued use of the platform after notification constitutes acceptance.
10. Contact
For privacy-related enquiries, please submit a support ticket at /support/ticket with the subject "Privacy Enquiry".