Privacy Policy

1. General

1.1 This Privacy Policy explains how Shoopa (a product of FTRX Group) collects, uses, stores, discloses, and processes your personal information through our AI-powered commerce platform, website, mobile applications, and related services.

1.2 Our General Terms of Use, Acceptable Use Policy, and Merchant Terms of Service (where applicable) are incorporated by reference into this Privacy Policy.

1.3 Shoopa serves three distinct groups:

• Merchants — business owners who use Shoopa to create AI-powered storefronts, manage inventory, process payments, and run their retail business
• Customers — shoppers who purchase from a Shoopa-powered store, interact with our AI sales assistant, or use the conversational checkout
• Visitors — anyone browsing our website, reading our blog, or contacting our support team

1.4 This Privacy Policy applies to all three groups. We maintain separate supplementary policies — Merchant Privacy Policy, Customer Privacy Policy, and Visitor Privacy Policy — which are incorporated by reference where applicable.

2. Application of the Privacy Policy

2.1 This Privacy Policy covers all systems, operations, and processes of Shoopa that involve the collection, use, storage, handling, and disclosure of personal information. It applies to your use of our Services through any device — desktop, laptop, mobile phone, or tablet.

2.2 By accessing or using any of our Services, including our AI chat assistant, checkout system, merchant dashboard, or public storefronts, you agree to this Privacy Policy.

2.3 This Privacy Policy does not apply to services not owned or controlled by Shoopa, including third-party payment processors (Paystack, Flutterwave, Monnify), logistics partners (Gokada, Shipbubble), or the individual privacy practices of Shoopa merchants.

3. Why We Process Your Information

3.1 We process your information to fulfill contractual obligations (for example, processing subscription payments or completing a checkout transaction) and for legitimate business interests, including:

• powering our AI sales assistant to answer product questions and generate checkout links
• preventing fraud and ensuring payment security across our platform
• providing merchant support and answering inquiries
• improving our AI models and platform features
• generating analytics and sales reports for merchants
• complying with legal and regulatory obligations, including KYC/AML requirements

3.2 Where required by law, we will ask for your consent before processing your information — for example, before sending marketing communications or placing non-essential cookies. You may withdraw your consent at any time.

4. Categories of Information We Collect and How We Collect It

4.1 We collect information you provide directly, information automatically collected through your use of our Services, and information from third parties.

Information you provide

4.2 When you create a Shoopa account, we collect your full name, email address, phone number, business name, and password. To process payments, we collect your bank account details and BVN for identity verification. When you set up your AI storefront, we collect your store name, tagline, theme preferences, product listings, and AI assistant customization choices.

4.3 When customers check out from a Shoopa-powered store, we collect their full name, email, phone number, delivery address, and payment details. This information is shared with the merchant to fulfill their order.

Information automatically collected

4.4 We automatically collect device information (hardware model, operating system, unique device identifiers, IP address), log information (pages visited, features used, time spent), and interaction data from our AI chat assistant (conversation history, product queries, handoff requests).

4.5 Our AI sales assistant records conversation transcripts to improve response accuracy and enable human handoff when needed. These transcripts are stored securely and associated with your store for quality assurance purposes.

Information from third parties

4.6 We may receive information from payment processors (Paystack, Flutterwave, Monnify) about transaction status, from identity verification services (Smile Identity) for KYC compliance, and from our logistics partners (Gokada, Shipbubble) for delivery tracking.

5. Information Collected Through Cookies and Similar Technologies

5.1 We use cookies and similar tracking technologies to operate and improve our platform. Session cookies expire when you close your browser and are used to keep you logged in. Persistent cookies remember your preferences and settings across visits.

5.2 We also use third-party cookies from Google Analytics (to understand platform usage), Facebook Pixel (to measure ad performance), and our payment partners (for fraud prevention). You can control cookie preferences through your browser settings.

6. How We Use Information

We use your information to:

• provide and improve our AI-powered commerce platform
• process payments and manage settlements to your Shoopa wallet
• generate sales analytics, best-selling product reports, and customer insights
• send transactional notifications via email, SMS (Termii), and WhatsApp
• verify merchant identity through Smile Identity KYC checks
• power the AI chat assistant on your storefront to answer customer questions
• generate XML product catalogs for Meta, Google Merchant, and TikTok
• comply with Nigerian financial regulations and anti-money laundering laws

7. AI and Machine Learning

7.1 Shoopa uses artificial intelligence and machine learning to power key features of our platform. Our AI systems are built on Google's Gemini models and are designed with privacy in mind.

7.2 Our AI sales assistant uses vector embeddings and semantic search to match customer questions with your product catalog. Conversation data is tenant-isolated — each merchant's AI only has access to their own products and store settings.

7.3 The AI store setup wizard helps merchants create their storefront through a conversational interface. Data provided during setup (store name, product details, theme preferences) is used solely to configure your store.

7.4 When you interact with our customer support AI, conversations may be reviewed for quality assurance. If the AI cannot resolve your issue, it will flag your query for human review and possible handoff.

7.5 We do not use your merchant data (products, customer lists, sales data) to train or improve AI models for other merchants. Your data remains yours.

8. How We Share Information

8.1 Shoopa does not sell your personal data. We share information only as necessary to provide our Services and as described below.

Payment processors

We share transaction data with Paystack, Flutterwave, and Monnify to process payments, handle settlements, and prevent fraud. Your full card details are never stored on Shoopa's servers — they are handled directly by our PCI-compliant payment partners.

Identity verification

BVN and identity documents are shared with Smile Identity for KYC verification. This information is used solely for compliance purposes and is not stored permanently on our platform.

Logistics partners

When you use Gokada or Shipbubble for delivery, we share order details (customer name, address, phone) with these partners to facilitate shipping.

AI infrastructure

Our AI features are powered by Google's Gemini API. Text prompts sent to the AI are processed by Google's infrastructure in accordance with their data processing terms. We do not send raw customer payment data or passwords to the AI.

8.2 We may also share information with law enforcement if required by applicable law, to protect our rights or property, or to prevent fraud or abuse of our platform.

9. Opt-Out Rights

You may opt out of marketing communications at any time by clicking “unsubscribe” in any email or by contacting us. Merchants will continue to receive transactional emails about their account, payments, and platform updates even after opting out of marketing.

10. Other Rights to Your Personal Information

You have the right to access, correct, or request deletion of your personal data. Merchants can update their profile information through the Shoopa dashboard. For other requests, contact our Data Protection Officer at legal@shoopa.app. We will respond to all legitimate requests within 30 days.

11. Information You Share on Social Platforms

Shoopa allows merchants to share their store links on WhatsApp, Instagram, Facebook, and TikTok. Any information you share through these third-party platforms is governed by their respective privacy policies, not ours.

12. Security and Storage of Your Personal Information

12.1 We implement industry-standard security measures including encryption (SSL/TLS), access controls, regular security audits, and employee training. Payment data is handled by PCI-compliant partners. Our infrastructure is hosted on secure cloud providers with data centers that maintain ISO 27001 certification.

12.2 You are responsible for safeguarding your account credentials. Enable two-factor authentication where available and do not share your password. Notify us immediately of any unauthorized access.

13. Data Retention

We retain your personal data for as long as your account is active or as needed to provide Services. Upon account deletion, we delete or anonymize your data within 90 days, except where retention is required by law (for example, transaction records for tax purposes).

14. Protecting Children's Privacy

Our Services are not directed to children under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal data, please contact us immediately.

15. Links to Third-Party Websites

Our platform may contain links to third-party services (payment gateways, logistics providers, social media platforms). We are not responsible for their privacy practices. Please review their policies before providing your information.

16. Changes to Our Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Shoopa dashboard. Continued use of our Services after changes constitutes acceptance of the revised policy.

17. Contact

Shoopa is a product of FTRX Group. For privacy-related inquiries, contact our Data Protection Officer at legal@shoopa.app.