Legal
Privacy Policy
We collect only what we need to deliver your purchase, keep your account secure, and provide support. We never sell personal information.
Overview
VeloxMart ("we", "our") is a digital marketplace operated at veloxmartstore.com. We act as data controller for information you provide directly, and as processor for data handled on behalf of our sellers. We process data to fulfil orders, deliver licences, prevent fraud, and provide customer support. You control your profile data and can request updates or deletion at any time.
Information we collect
- Account data: Name, email address, and password (hashed — never stored in plain text).
- Transaction data: Order numbers, product selections, billing currency, payment status, and delivery records.
- Download audit data: IP address, browser user-agent, and timestamps recorded each time a purchased file is downloaded. This is required to enforce per-account download limits and detect abuse.
- Support data: Messages, attachments, and ticket history you share with our team.
- Usage data: Pages visited, session duration, and device signals collected for security and analytics.
- Seller data: Business name, payout details, and product listings for sellers registered on the platform.
How we use information
Deliver purchases & licences
Fulfil orders, generate download tokens, and send purchase confirmations.
Provide support
Respond to help requests, investigate disputes, and process refunds.
Prevent fraud & abuse
Detect credential sharing, abnormal download patterns, and chargebacks.
Improve the platform
Analyse product discovery, search quality, and checkout conversion.
Legal & financial compliance
Meet tax, audit, and anti-money-laundering obligations.
Service communications
Send order receipts, download links, and policy update notices.
Third-party processors
We share data only with the processors listed below. Each is contractually obligated to protect your data and use it solely for the stated purpose.
| Processor | Purpose |
|---|---|
| Paystack | Payment processing |
| Cloudinary | Product image hosting |
| Cloudflare R2 | Secure digital file storage |
| MongoDB Atlas | Database hosting |
Security & retention
Passwords are hashed using bcrypt. Data in transit is encrypted via TLS. File downloads are served through short-lived signed URLs to prevent unauthorised access. We retain order and download records for seven years to meet financial obligations; profile data is deleted within 30 days of an account deletion request.
Your rights
Depending on your jurisdiction you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email support@veloxmartstore.com from the address associated with your account.
- Access: Request a copy of data we hold about you.
- Correction: Update inaccurate profile information via Account Settings.
- Deletion: Request account and data deletion (subject to legal retention requirements).
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
Contact
For privacy questions, data requests, or to report a concern, email us at support@veloxmartstore.com. We aim to respond within two business days.