Privacy Policy
At Escora, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our escrow payment platform.
Last Updated: December 16, 2025
1. Information We Collect
1.1 Information You Provide Directly
Account Information:
- •WhatsApp phone number
- •Full name
- •Delivery addresses (buyers)
- •Bank account details (sellers only)
Transaction Information:
- •Item descriptions and prices
- •Seller and buyer contact details
- •Payment methods and history
- •Transaction codes and timestamps
- •Delivery confirmation status
Communication Data:
- •Support tickets and dispute reports
- •Feedback and reviews
- •Phone call recordings (for support quality)
1.2 Information From Third Parties
Payment Processors (Paystack):
- •Payment confirmation status
- •Transaction success/failure data
- •Bank verification results
WhatsApp Business API:
- •Message delivery status
- •Read receipts and timestamps
- •Profile information (if publicly available)
2. How We Use Your Information
2.1 Core Platform Functions
Transaction Processing:
- •Creating and managing escrow transactions
- •Processing payments and payouts
- •Verifying bank account details
- •Tracking shipment and delivery status
- •Triggering auto-release and auto-refund systems
Communication:
- •Sending transaction confirmations and updates
- •Notifying about shipment and delivery
- •Sharing payment receipts
- •Delivering important account alerts
Account Management:
- •Creating and maintaining your account
- •Managing your transaction history
- •Storing saved addresses and seller information
2.2 Platform Improvement
Analytics and Research:
- •Understanding user behavior and preferences
- •Identifying pain points and friction
- •Testing new features and improvements
- •Measuring platform performance
AI Enhancement:
- •Training our conversational AI (Cora)
- •Improving intent detection accuracy
- •Personalizing responses
- •Detecting and preventing fraud
2.3 Safety and Security
Fraud Prevention:
- •Detecting suspicious transaction patterns
- •Identifying fake accounts or bot activity
- •Preventing payment fraud and chargebacks
- •Verifying user identities
Dispute Resolution:
- •Investigating buyer and seller disputes
- •Reviewing evidence and communications
- •Making informed resolution decisions
- •Maintaining records for legal compliance
2.4 Legal Compliance
Regulatory Requirements:
- •Meeting financial service regulations
- •Complying with anti-money laundering (AML) laws
- •Responding to lawful requests from authorities
- •Maintaining transaction records as required
4. Data Security
4.1 Technical Safeguards
Encryption:
- •All data transmitted using TLS/SSL encryption
- •End-to-end encryption for WhatsApp messages
- •Bank details tokenized and never stored in plain text
4.2 Organizational Safeguards
Policies and Training:
- •Strict data access policies for all employees
- •Regular security awareness training
- •Incident response procedures
- •Third-party security audits
Data Minimization:
- •We only collect necessary information
- •Automatic deletion of expired data
- •Regular data cleanup and archiving
- •Pseudonymization where possible
4.3 Your Responsibility
Protect Your Account:
- •Keep your WhatsApp account secure
- •Don't share transaction codes
- •Use strong device passwords/biometrics
- •Report suspicious activity immediately
5. Data Retention
5.1 How Long We Keep Your Data
Active Transactions:
- •Retained until transaction completion
- •Plus 90 days for potential disputes
- •Extended if dispute is active
Completed Transactions:
- •7 years for financial/tax compliance
- •Transaction codes and amounts preserved
- •Personal details anonymized after 2 years
Account Data:
- •Retained while account is active
- •30 days after account closure (grace period)
- •Legal compliance data retained up to 7 years
5.2 Data Deletion
You can request deletion by contacting privacy@getescora.com. Note:
- •Some data must be retained for legal compliance
- •Anonymized analytics may be retained indefinitely
- •Deletion is permanent and irreversible
6. Your Privacy Rights
6.1 Access and Correction
You Have the Right To:
- •Access all personal data we hold about you
- •Request corrections to inaccurate information
- •Download your data in portable format
- •Receive a summary of data processing activities
How to Exercise:
- •Contact privacy@getescora.com
- •Request through WhatsApp support
- •Response within 14 days
6.2 Deletion and Objection
You Can Request:
- •Deletion of your account and data
- •Opt-out of marketing communications
- •Restriction of certain processing activities
- •Objection to specific uses of your data
Limitations:
- •Legal obligations may prevent full deletion
- •Active transactions must be completed first
- •Anonymized data may be retained
6.3 Complaints
If you believe your privacy rights have been violated:
- •Contact our Data Protection Officer: privacy@getescora.com
- •File a complaint with the Nigeria Data Protection Commission (NDPC)
7. Children's Privacy
Escora is not intended for users under 18 years old. We do not knowingly collect information from minors. If we discover that a minor has provided information, we will delete it immediately.
Parents/Guardians: If you believe your child has used Escora, contact us immediately at privacy@getescora.com.
8. International Data Transfers
Your data is primarily stored in Nigeria. If transferred internationally:
- •Only to countries with adequate data protection
- •Under appropriate safeguards (Standard Contractual Clauses)
- •With your explicit consent when required
9. Marketing Communications
9.1 What We Send
Transaction Updates:
- •Payment confirmations (cannot opt-out)
- •Shipment notifications (cannot opt-out)
- •Delivery reminders (cannot opt-out)
Marketing Messages:
- •Product updates and new features
- •Tips for safe transactions
- •Special offers or promotions
9.2 Opt-Out Options
You Can Unsubscribe From:
- •Marketing WhatsApp messages
- •Promotional emails: Click 'Unsubscribe' link
- •Feature announcements: Adjust preferences in settings
You Cannot Opt-Out Of:
- •Critical transaction notifications
- •Security alerts and fraud warnings
- •Legal or compliance notices
10. Third-Party Links
Our platform may contain links to external websites or services:
- •We don't control their privacy practices
- •Review their privacy policies before sharing data
- •Not responsible for third-party data handling
11. Data Breach Notification
In the event of a data breach affecting your information:
- •We will notify you within 72 hours
- •Notification via WhatsApp
- •Explanation of what data was affected
- •Steps we're taking to mitigate harm
- •Actions you should take to protect yourself
12. Changes to This Policy
12.1 Updates
We may update this Privacy Policy to:
- •Reflect new features or services
- •Comply with legal requirements
- •Improve clarity and transparency
- •Address user feedback
12.2 Notice of Changes
- •Material changes notified via WhatsApp
- •Effective date updated at the top
- •Previous versions archived and available
12.3 Your Continued Use
Using Escora after changes constitutes acceptance of the updated policy.
13. Contact Us
13.1 Privacy Questions
Data Protection Officer:
- •Email: privacy@getescora.com
- •Response time: 24 hours for urgent matters
General Inquiries:
- •Email: hello@getescora.com
- •WhatsApp: Chat with Cora
- •Website: www.getescora.com
14. Legal Basis for Processing
We process your data based on:
- •Contract Performance: Necessary to provide our services
- •Legal Obligation: Required for financial compliance
- •Legitimate Interest: Fraud prevention and platform improvement
- •Consent: Marketing and optional features (can be withdrawn)
Acknowledgment
By using Escora, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described.
Your privacy matters to us. If you have questions, we're here to help.
Escora — Your data, protected.
