Privacy Policy

• Account info: name, email, phone number, lodge, room number, department, level
• KYC documents: school receipt (uploaded to Cloudinary, stored securely)
• Guarantor information: name, phone number, relationship
• Booking data: dates, slot types, payment references
• Usage data: login times, booking history

• To verify your identity (KYC) and determine your eligibility for the service
• To process bookings and securely handle payments
• To send SMS notifications via Termii (including booking confirmations and return reminders)
• To manage your account effectively and provide customer support
• To prevent fraud and enforce our Terms of Service

Payments are securely processed by Paystack. Deap does not store your card details. Paystack's privacy policy applies directly to your payment processing. We only store payment reference numbers and transaction amounts.

By registering for an account, you consent to receive transactional SMS messages from DEAP via Termii to the phone number you provided. These include:

• Account verification status updates
• Booking confirmations
• Return reminders

You can opt out by contacting support, but please note that this may severely affect your ability to use the service.

We do not sell your personal data. We share data only with trusted third-party providers:

• Clerk (authentication) — clerk.com/privacy
• Paystack (payments) — paystack.com/privacy
• Cloudinary (document storage) — cloudinary.com/privacy
• Termii (SMS delivery) — termii.com/privacy

We may also share information with campus authorities only if required by law or to investigate severe cases of fraud.

Your data is stored securely on Supabase (PostgreSQL) servers. KYC documents are stored on Cloudinary with restricted access. We use HTTPS encryption for all data transmission to protect your information, and access to your data is strictly restricted to authorised Deap staff only.

You have the right to:

• Access the personal data we hold about you
• Request correction of any inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for SMS notifications

To exercise these rights, please email support@donjedenergy.com.ng.

We retain your data for as long as your account is active. After account deletion, we retain anonymised booking records for 12 months strictly for fraud prevention purposes.

We use essential cookies only (required for authentication via Clerk). We do not use any tracking or advertising cookies.

For any privacy-related questions or concerns, please contact us at support@donjedenergy.com.ng.