Curva is a WhatsApp-based conversational commerce service operated by ANIGRAM NIGERIA LIMITED ("Curva", "we", "us", or "our"). This policy explains what personal information we collect when you use Curva, how we use it, who we share it with, and the rights you have over your data.
This policy is designed to comply with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act, 2023.
1. Information we collect
When you interact with Curva through WhatsApp or our vendor partners, we may collect:
WhatsApp identifiers: your phone number and WhatsApp profile name.
Message content: text messages, voice notes, images, and interactive replies you send to our WhatsApp number, including transcripts of voice notes.
Order details: items ordered, quantities, delivery address, delivery zone, preferred fulfilment type, and any special instructions.
Payment references: transaction references generated by our payment processors. We do not store your full card number, CVV, or bank credentials.
Delivery information: address, location coordinates (if you share a pin), and recipient contact details.
Order history and preferences: past orders, favourite vendors, and preferences derived from your interactions to make future ordering faster.
Technical logs: timestamps, message IDs, and error diagnostics we use to keep the service reliable.
2. How we use your information
We use the information described above to:
Process and fulfil your orders end-to-end, from placing the order to delivery.
Route each order to the correct vendors and delivery couriers, and notify them of what to prepare and where to bring it.
Send you order updates over WhatsApp: confirmations, dispatch notifications, delivery updates, and receipts.
Take payment through our payment processors and reconcile settlements with vendors.
Provide customer support when you contact us about an order or a general enquiry.
Improve the accuracy of our voice-note transcription, product matching, and order suggestions.
Prevent fraud, abuse, and misuse of the service.
Comply with legal, regulatory, and tax obligations in Nigeria.
3. Who we share your information with
Curva only shares your information with the third parties needed to deliver the service you asked for:
Meta Platforms, Inc. — as the operator of WhatsApp, Meta processes all messages exchanged through our WhatsApp Business number. Meta's own privacy terms apply to that processing.
Participating vendors — supermarkets, restaurants, pharmacies, and other merchants receive only the portion of your order that relates to them, plus the delivery contact needed to hand over goods.
Payment processors — Paystack, Flutterwave, or other licensed Nigerian payment processors receive the information needed to take payment and issue receipts.
Delivery partners — third-party dispatch couriers receive the pickup address, drop-off address, and recipient contact so they can complete the delivery.
Technology providers — cloud hosting, database, transcription, and language-model providers that process data on our behalf under confidentiality obligations.
Regulators and law enforcement — where we are legally required to disclose information under applicable Nigerian law.
We do not sell your personal information to advertisers or data brokers.
4. How long we keep your information
We keep your information for as long as you continue to use Curva and for a reasonable period after that, to fulfil legal, accounting, and dispute-resolution obligations. Order and payment records are typically retained for seven (7) years, in line with Nigerian tax law. Message transcripts used for service improvement are retained for up to twelve (12) months and then deleted or anonymised.
5. How we protect your information
We use industry-standard measures to protect your information, including encryption in transit (TLS), access controls, isolated production environments, regular backups, and monitoring for unauthorised access. No system is perfectly secure, but we take reasonable steps to reduce risk.
6. Your rights
Under the NDPR and Nigeria Data Protection Act, you have the right to:
Access the personal information we hold about you.
Ask us to correct information that is inaccurate or out of date.
Ask us to delete your information, subject to legal retention requirements.
Object to certain uses of your information, or ask us to restrict how we process it.
Request a portable copy of your information in a common electronic format.
Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
To exercise any of these rights, contact us at the email address below.
7. Children
Curva is intended for use by adults aged 18 and above. We do not knowingly collect information from anyone under 18. If you believe a minor has provided information to us, please contact us and we will take steps to remove it.
8. Changes to this policy
We may update this policy from time to time. When we do, we will update the effective date at the top of the page. Significant changes will be communicated through the WhatsApp channel where possible.
9. Contact us
If you have questions about this policy or how we handle your information, contact us at privacy@curva.ng.
Data controller
ANIGRAM NIGERIA LIMITED
Registered in Nigeria
Lagos, Nigeria
Email: privacy@curva.ng