Privacy Policy

1. Who is responsible for your data

Tarvico Inc., a Delaware, USA corporation, is the controller of personal data processed on the Maeyen platform. Maeyen Technologies Nigeria Ltd, the operating subsidiary of Tarvico Inc., operates the platform day to day.

You can reach Tarvico Inc. about privacy at info@maeyen.com (general and privacy inquiries) or support@maeyen.com (account requests).

2. Scope

This policy covers all Maeyen surfaces operated by Tarvico Inc.: the web app, admin console, mobile app, Worker API, Trust ID, identity verification (KYC), protected transactions, evidence, disputes, reputation, the public trust lookup, and marketplace application flows.

3. Data we collect

Tarvico Inc. collects the data needed to run trust infrastructure:

• Account and authentication data (email, credentials, session metadata).
• Profile and contact data.
• Trust ID and role data.
• Seller and business profile data.
• Identity verification data — government ID references (hash and last digits), photo ID, selfie and liveness media, provider response metadata, and review status.
• Protected transaction, payment link, payment provider reference, and payment status data.
• Evidence, delivery proof, dispute messages, dispute evidence, and admin decisions.
• Public trust lookup and API usage metadata.
• Device, IP address, user agent, and security log metadata.

4. Data we do not collect

Tarvico Inc. does not intentionally collect or store card numbers (PAN), CVV/CVC codes, PINs, or equivalent sensitive payment authentication data. Payment collection is handled by our payment providers. The platform stores only provider references, payment status, amount and currency, and webhook identifiers needed for the transaction lifecycle.

5. Why we process your data

Tarvico Inc. processes personal data to:

• Create and maintain accounts and issue Trust IDs.
• Verify identity and commerce trust signals.
• Operate protected transactions and process payment status through provider webhooks and verification APIs.
• Handle evidence, delivery confirmation, disputes, refunds, and payment releases.
• Maintain the Verified Commerce Graph — the append-only record of verified commerce events.
• Prevent fraud, abuse, identity misuse, and security incidents.
• Provide the public trust lookup and merchant/developer APIs.
• Meet legal, regulatory, tax, accounting, and dispute obligations.

6. Legal bases

Depending on your jurisdiction, Tarvico Inc. relies on: performance of a contract (accounts, Trust IDs, transactions); legitimate interests (fraud prevention, platform integrity, security and audit logs); consent (certain identity verification and optional features); and legal obligation (identity checks, tax, and regulatory duties where applicable).

7. Who we share data with

Tarvico Inc. shares data with service providers needed to operate the platform, under contracts that restrict their use of it:

• Database, authentication, and storage providers.
• Hosting, API, and network security providers.
• Payment providers, for payment collection and verification.
• Identity verification providers, when verification is enabled.
• Professional advisers, auditors, regulators, or law enforcement where legally required.

8. Public trust information

The public trust lookup shows only approved public fields — such as a business name, verification status, and reputation derived from verified outcomes. Tarvico Inc. does not publish your private contact details, identity documents, or transaction contents through the public lookup.

9. Your rights

Depending on your jurisdiction, you may ask Tarvico Inc. for:

• Access to your personal data.
• Correction of inaccurate data.
• Deletion, subject to legal holds and the integrity of the Verified Commerce Graph.
• Restriction of, or objection to, processing.
• Data portability.
• Withdrawal of consent where consent is the legal basis.

10. Security

Tarvico Inc. protects personal data with measures that include row-level security for user-scoped data, service-role-only access for trust-affecting operations, append-only commerce events and audit logs, private storage for identity verification media, hashing of sensitive identity numbers with a server-side secret, payment webhook signature verification with server-side transaction verification, admin role enforcement, and web security headers.

11. Retention

Tarvico Inc. retains different categories of data for different periods. Identity verification media, disputes, evidence, payment records, audit logs, and commerce events may be kept longer than ordinary profile data because they support fraud prevention, transaction integrity, legal claims, and the immutable Verified Commerce Graph. When retention ends, data is deleted or anonymized.

12. International transfers

Tarvico Inc. uses global cloud providers, so your data may be processed outside your country, including in the United States and the European Union. Where required, Tarvico Inc. relies on appropriate safeguards such as contractual protections with its providers.

13. Children

Maeyen is not directed at children, and Tarvico Inc. does not knowingly collect personal data from anyone under 18. If you believe a minor has provided data to the platform, contact us and we will delete it.

14. Changes to this policy

Tarvico Inc. may update this policy from time to time. Material changes will be announced on the platform or by email before they take effect, and the “Last updated” date above will change.

15. Contact

Privacy questions and requests can be sent to Tarvico Inc. at info@maeyen.com. Account help is available at support@maeyen.com, and fraud or safety reports at trust@maeyen.com.