Privacy Policy Visit Arewa
Our commitment to safeguarding your privacy, personal information, and cultural integrity.
Visit Arewa Privacy Policy
Effective: October 11, 2026 • Compliance: NDPR & Global Standards
Welcome to Visit Arewa, an open digital tourism and cultural archive platform built and maintained by Veyrix Technologies. We respect your privacy and are committed to protecting your personal data when you explore our destinations, register for cultural events, submit heritage stories, or interact with our community curators.
This Privacy Policy explains what personal information we collect, how it is secured, and your rights regarding your data under the Nigeria Data Protection Regulation (NDPR) and international privacy standards.
1. Information We Collect
We collect information only to provide our cultural documentation and community portal services:
A. Account & Verification Data
When you create an account, we collect your full name, email address, chosen username, and password. For email verification, 6-digit verification codes are stored only as one-way cryptographic SHA-256 hashes.
B. Google OAuth Data
If you choose to sign in via Google, we receive your name, verified email address, and Google profile avatar from Google OAuth. We never request or access your private Google account credentials or contacts.
C. Cultural Contributions & Profile Details
Bio descriptions, origin states, social handles, photography, and articles you publish as a curator or explorer are stored in our database and made public to promote Northern Nigerian heritage.
D. Event Registrations & Newsletter
When reserving passes for cultural festivals (e.g. Kano Durbar) or subscribing to platform bulletins, we collect your email to issue digital tickets and delivery receipts via Zoho Mail.
2. Google User Data & Limited Use Disclosure
Visit Arewa strictly adheres to the Google API Services User Data Policy, including the Limited Use requirements:
- We only request read access to basic profile scopes (
email,profile,openid). - We do not sell, rent, or transfer Google user data to third parties, data brokers, or advertising networks.
- We do not use Google user data to train generalized AI or machine learning models.
- Google authentication tokens are handled securely through Supabase Auth PKCE sessions with strict TLS encryption.
3. How We Use Information
- To authenticate your identity securely and maintain your creator or explorer session.
- To dispatch automated account receipts, 6-digit OTP verification codes, and festival entry tickets through Zoho Mail SMTP.
- To attribute cultural photography, craft reviews, and heritage stories to your creator profile.
- To prevent abuse, bot spam, and brute-force intrusion attempts on authentication endpoints.
4. Security & Data Storage
Your data is stored in enterprise-grade infrastructure managed through Supabase and PostgreSQL, protected by:
• Row Level Security (RLS): Restricts database records so users can only modify their own profile information and submissions.
• Cryptographic Passwords & Hashes: All passwords and 6-digit verification codes are one-way hashed before database storage.
• Encrypted Transport: 100% of network traffic between your device and Visit Arewa runs over HTTPS with TLS 1.3 encryption.
5. Your Rights & Data Deletion
You retain full control over your personal information. At any time, you can:
- Edit your profile, username, bio, and social links directly in your Profile Settings.
- Request a copy of all personal data associated with your account.
- Request permanent deletion of your account and personal profile data by emailing our team.
Contact & Data Protection Inquiries
If you have questions regarding this Privacy Policy or wish to request data removal, please contact our team:
Email: hello@visitarewa.com
Developer: devs@veyrixtech.com
Organization: Veyrix Technologies / Visit Arewa Initiative
Location: Abuja, Nigeria