Privacy Policy

Zeddhub is a platform that lets a merchant create their own independent online store — products, orders, checkout, and payments, without needing to build any of it themselves. This policy applies to two groups:

• Merchants — anyone who signs up to create and run a store on Zeddhub.
• Customers — anyone who shops at a store built on Zeddhub.

• Account & store details — your name, email, password (stored as a one-way hash, never in plain text), and the store details you set up (store name, address, contact info, branding).
• Payout details — to receive payment from your own customers, you connect a bank account (bank name, account number, and the account name we verify with our payment processor, Paystack). We use this to create a payout account on your behalf — we never ask for or store your own card details or banking password.

Zeddhub offers an optional feature that lets a merchant connect a social account (currently Instagram) to import their existing posts as product drafts, instead of manually re-entering everything. This section explains exactly what that involves.

• What we access — with your explicit permission (via Instagram's own login and consent screen), we read your professional account's basic profile info and your own media (photos, captions, and timestamps of your posts). We request only the permission needed for this (instagram_business_basic) — we cannot see private messages, followers, or anyone else's content.
• What we do with it — selected posts are shown back to you to review and optionally turn into draft products in your own store. Any images you choose to keep are copied into your store's own image storage. Nothing is ever posted, edited, or deleted on your Instagram account, and nothing is published as a real product until you explicitly confirm it.
• How it's stored — your access token is encrypted at rest (AES-256-GCM) and is only ever used to make requests to Instagram's API on your own behalf — never shared with any other merchant, any customer, or any third party, and never used for advertising.
• How to remove it — you can disconnect a connected account at any time from your store's admin dashboard (Import Products → Disconnect), which immediately and permanently deletes the stored token from our database. You can separately revoke Zeddhub's access from Instagram/Meta's own account settings at any time, independent of us.

When someone buys from a store built on Zeddhub, that store (via our platform) collects what's needed to fulfill the order: name, email, phone number, shipping address, the items ordered, and — for bank transfer payments — a proof-of-payment image the customer uploads. Card and bank details for online payments are handled directly by the store's payment processor (Paystack, Monnify, or OPay, depending on the store); Zeddhub does not see or store full card or account numbers.

• We don't use advertising trackers, ad pixels, or third-party analytics/marketing cookies anywhere on the platform.
• We don't sell or rent merchant or customer data to anyone.
• We don't share one store's data with another — every store's data is kept separate, even though they run on shared infrastructure.
• We never use a merchant's connected social media data for anything other than the import feature they explicitly used it for.

• Payment processors (Paystack, Monnify, OPay) — to process payments and, for Paystack, to route a merchant's share of each sale directly to their bank account.
• Cloudinary — to host product, store, and proof-of-payment images.
• Our email provider — to deliver order, account, and store-related emails.
• Meta / Instagram — only for merchants who connect an account, as described above.

Passwords are hashed, never stored as plain text. Social media access tokens are encrypted at rest. Every store's data is scoped so it's only ever accessible within that store's own context. Sessions use signed, expiring tokens rather than long-lived shared secrets.

• Ask what data we hold about you, correct it, or request its deletion, at any time.
• Merchants can disconnect a social media connection whenever they like, with immediate effect.
• Customers can contact the specific store they bought from, or reach us directly using the details below.

Questions about this policy, or a request about your data? Reach us at [email protected].