Privacy policy
Effective 11 November 2026
This explains what Online Store collects, why, and what you can do about it.
What we collect
- Account: your email address, an optional display name, and your password stored only as a secure hash.
- Device: a random device identifier, your browser type and IP address, used to keep each account to one device and to spot suspicious sign-ins.
- Content: logos you upload, presets you save, and the text of each image you export.
- Payments: plan, amount, date, status and Flutterwave's reference. Card and bank details go to Flutterwave and never reach us.
- Security log: sign-ins, password changes and device moves.
Why we use it
- to run your account and give you access to the plan you paid for;
- to send verification codes, password reset links, receipts and security alerts;
- to enforce the one-device rule and prevent fraud and misuse, including misuse of mockups;
- to meet legal obligations.
We don't sell your data or use it for advertising.
Who we share it with
- Flutterwave processes payments.
- Brevo sends our emails.
- Our hosting providers store the data on our behalf.
- Authorities, when the law requires it or to respond to fraud.
How long we keep it
We keep your data while your account is open. If you ask us to delete your account, we delete it within 30 days, except payment records and records needed to investigate misuse, which we keep for as long as the law requires.
Your rights
Under the Nigeria Data Protection Act 2023 you can ask for a copy of your data, ask us to correct or delete it, and object to how we use it. You can also complain to the Nigeria Data Protection Commission.
Security
Connections are encrypted, passwords are hashed with Argon2id, sessions are tied to your device, and only staff who need access can see account data.
Questions: reply to any email we've sent you.