Privacy Policy
Version 4 · Last updated 19 October 2026
1. Scope, operator and contact
This Privacy Policy covers the ROVENDIA website, live customer, rider and company browser apps, and the separately labelled interactive demonstration. ROVENDIA is a product of NEXORA Technologies Limited. For privacy enquiries or requests, email support@rovendia.com or call 08152403552 (+234 815 240 3552). You may also use the WhatsApp contact on our website.
2. Information we process
Website forms collect the name, email, city, role or interest, enquiry and optional phone number you supply, together with the agreement wording, policy versions, time and optional update choice. Live customer accounts store name, email, phone number, password hash, profile photo, selected state, preferred company and referral relationship. Company and rider records include account and business details, rider availability, vehicle details and the pay arrangement entered by the company. Do not submit passwords, card numbers, medical records or identity documents through general enquiry or chat forms.
3. Bookings, payments and referral coins
Bookings contain pickup and destination addresses and map points, sender and recipient names and phone numbers, parcel information, instructions, company, price, status and timestamps. We store payment references and verification results needed to reconcile an order. Paystack processes card and bank checkout under its own terms; do not send card details to ROVENDIA staff or in chat. Referral records link a referring account to the referred account and qualifying delivery, coin credits, delivery redemptions and refunds. ROVENDIA also records the company amount it must fund for coin-paid deliveries. A test payment is labelled and does not release a real delivery or create cash income.
4. Why we use information and legal grounds
We use account and booking information to provide the requested service, calculate company delivery prices, arrange and track deliveries, support communications, manage payments and rewards, and resolve enquiries or complaints. We use necessary security and audit records to prevent misuse, maintain service reliability and meet applicable legal duties. Processing may be necessary for a contract or requested preliminary steps, legal obligations, or legitimate interests subject to applicable safeguards. Optional marketing relies on a separate choice where consent is required. Browser permission for location or microphone is not blanket consent to unrelated processing, and accepting Terms does not remove privacy rights.
5. Location, maps and tracking links
With browser permission, the customer app can display your current location. Company sharing of a customer position is limited to that customer’s active paid or ROVENDIA-funded coin delivery and its booking company. Online riders share their current position with their company and registered team; the assigned active delivery’s customer can see the rider’s fresh position through authorised tracking. Going offline stops rider sharing. Stale or unavailable positions are not presented as current. This browser service does not promise continuous background or locked-screen tracking. Geoapify provides mapping, address search and routing and receives the coordinates or address queries needed for those requests. MapLibre displays the map. A signed tracking link acts as a private access link: anyone you give it to may see that delivery’s permitted details. Do not post it publicly.
6. Messages, calls, attachments and feedback
We store delivery and company support conversations, timestamps, read information and attachments so authorised participants can communicate. Attachments are limited to the relevant conversation and are stored outside the public website directory. Feedback can contain a rating, selected topics, written comments, an optional photo and a choice allowing contact about the feedback. The booking company may view delivery-linked feedback. Where the configured in-app calling service is available, Nexconn processes the identity and call information needed to connect authorised participants; microphone permission is requested by the browser. Cellular call options use your phone service. These features do not imply that calls are recorded.
7. Recipients and service providers
We share booking and contact details with the chosen independent delivery company and the authorised fulfilment team, including an accepted partner company where the job is outsourced. Authorised ROVENDIA personnel access information needed for support, operations, security and legal obligations. Hostinger hosts the website, database and application files; Geoapify supports maps and routing; Paystack supports payment processing; Nexconn supports the configured calling service. WhatsApp handles information you choose to send through it. Google Fonts and externally hosted application libraries may receive normal technical request details when loaded. Providers may process information outside Nigeria; applicable transfer safeguards must be assessed for the relevant service. We do not sell account or booking information.
8. Cookies, device storage and notifications
Essential secure session cookies support sign-in, security and form protection. Browser storage supports preferences, appearance, introduction state and related app functions. Website cookie choices are remembered for up to 180 days; analytics and marketing choices start off, and accepting them does not itself activate an unconnected tool. Cookie settings in the website footer lets you change optional choices. App notifications show relevant account, delivery and message updates. Phone or browser push alerts depend on the feature being available, your device and your permission; a settings screen is not a guarantee of closed-app delivery. Website form submission does not automatically send email or SMS.
9. Sponsored banners
The customer app can show ROVENDIA or clearly labelled sponsored banners selected by state and campaign schedule. Platform administrators control these campaigns. Following an external advertiser’s link opens a separate service with its own privacy practices. A banner does not give an advertiser access to your private account, booking, chat or live location.
10. Retention and deletion
We retain account information while needed to operate the account and service. Bookings, payment and reward records, communications and complaints may remain while needed for fulfilment, reconciliation, disputes, fraud prevention or legal obligations. We do not promise that logging out or clearing browser storage deletes server records. Live location storage holds the latest position rather than a journey history; old rider location rows are cleaned during service requests, and sharing ends when the relevant conditions no longer apply. Website abuse-protection rate records use a keyed IP hash and are cleaned after 48 hours on subsequent form submissions. Contact us for access or deletion requests; we explain any records that must be retained and why.
11. Security
The hosted service uses HTTPS, authenticated sessions, password hashing, server validation and access checks designed to restrict private records to authorised users. No online service can guarantee absolute security. Keep your password and private tracking links confidential, sign out on shared devices and report suspected access to your account. Do not enter sensitive information if your browser warns that the connection is insecure.
12. Your rights and choices
Subject to applicable law, you may request information, access, correction, deletion, restriction or portability, object to processing, withdraw consent where relied upon, and exercise rights concerning automated decisions. To make a request, contact support@rovendia.com or call 08152403552 (+234 815 240 3552). We may request proportionate identity verification before disclosing or changing private records. Withdrawing optional permission does not make earlier lawful processing unlawful. Disabling location or microphone can limit features that need those permissions without authorising unrelated collection.
13. Children and third-party information
Accounts and business forms are intended for adults. Provide recipient and other third-party contact information only where you have a lawful basis to arrange the delivery and share those details. If you believe a child’s or another person’s information was submitted inappropriately, contact us so we can assess it. Do not use general forms or chats to send unnecessary sensitive information.
14. Complaints and updates
You may contact ROVENDIA about a privacy concern and complain to the Nigeria Data Protection Commission at ndpc.gov.ng. Mandatory privacy rights and regulatory powers are preserved. We will update this notice as processing changes and seek a new choice where required. The policy version recorded at acceptance remains the record of that acceptance; this update does not rewrite historical consent.
15. Separate demonstration
The interactive prototype is separately labelled as a demonstration and may use sample records and browser-local data. Clearing its browser storage removes that local dataset, not a live ROVENDIA account. Use sample information in the demonstration. Live app information is stored on the server as described above.