1. Data Collection

We collect basic merchant account information (including name, email address, and store settings) necessary to provision and administer your digital storefront. We collect operational telemetry to evaluate platform stability and improve performance. We do not collect customer payment card data or private transaction records between merchants and buyers.

2. Merchant Sovereignty

Merchants operate as independent data controllers for their respective storefronts and customer relationships. You retain complete ownership of your catalogue, brand media, and customer order records. Cabanca will never monetise, sell, or disclose merchant customer data to third-party marketing networks.

3. Payment Security (Paystack and Banking Tokenisation)

All financial transactions are conducted directly via PCI-DSS certified payment processors, including Paystack. Banking credentials and payment cards undergo direct tokenisation through these gateways. Merchant API secrets are encrypted at rest and are inaccessible to unauthorised personnel. Cabanca never handles, captures, or stores raw payment card numbers.

4. Data Storage and Security

Data is stored securely on resilient Convex cloud infrastructure with encryption in transit and at rest. We adhere to industry-standard access controls, secure session management, and continuous defensive monitoring.

5. Data Subject Rights

You retain the right to inspect, amend, export, or request the erasure of your personal data stored within Cabanca. Requests can be submitted at any time through our official support channels.

6. Cookies and Telemetry

Cabanca utilises only essential session cookies and performance telemetry required to preserve authentication states and navigation flow. We do not deploy behavioural ad-tracking pixels or third-party marketing scripts.

7. Contact and Enquiries

For privacy enquiries or data governance requests, please contact the Cabanca data protection team.