Privacy Policy

Information you give us

• Account details: your name, email address and password (stored securely, never in plain text), and your phone or WhatsApp number if you provide it.
• Profile: your username, photo, bio, track and anything else you add.
• Learning activity: courses you enroll in, lessons you complete, builds and capstones you submit, and mentor feedback and scores.
• Community activity: posts, reactions and comments in The Verse, and direct messages you send through the Platform.
• Earning and payouts: campaign submissions and the links to your posts, referral activity, and, if you earn on BlueVerse, the bank account details you give us for payouts.
• Messages to us: anything you send when you contact us.

Information collected automatically

• Basic technical data such as your device, browser and the pages you visit, and data stored in your browser to keep you signed in.

Payments: course payments are handled by Paystack. We receive a payment reference, the amount and its status. We never see or store your full card details.

• To create and run your account and give you access to courses you pay for.
• To let mentors review your work and track your progress, and to issue certificates.
• To run The Verse, direct messages, The Forge and Blue V.
• To process payments, refunds, campaign earnings, referral rewards and payouts, and to stop fraud.
• To send you service messages, such as receipts, course updates and replies to your requests.
• To keep the Platform safe, enforce our Terms of Service, and improve how it works.

We rely on these legal bases under the NDPA: performing our agreement with you, our legitimate interests in running and protecting BlueVerse, complying with the law, and your consent where we ask for it (for example, for marketing messages, which you can stop at any time).

BlueVerse is built around showing your work, so some information is visible to others:

• Public: your name, photo, track, your Forge portfolio, builds approved as shipped, and certificate pages (so employers and clients can verify them).
• Other members: your Verse posts and profile.
• Your mentor and their Head of Mentor: your submissions, progress and feedback for their courses.
• Private: your email, phone number, password, payment details and bank details are never shown publicly.

Our WhatsApp communities are run on WhatsApp, so your WhatsApp name and number are visible to other members of any group you join, under WhatsApp's own privacy policy.

We don't sell your personal data. We share it only with providers who help us run BlueVerse, under agreements that require them to protect it:

• Supabase: database, sign-in and file storage.
• Vercel: website hosting.
• Paystack: payments and refunds.
• Email providers: to send account and course emails.
• AI model providers: to power Blue V. What you type into Blue V is sent to them to generate a reply.

We may also share information when the law requires it, to protect people's safety, or as part of a merger or sale of BlueVerse (in which case this policy will continue to apply to your data).

Some of our providers store data outside Nigeria. Our main database is hosted in the European Union. When data leaves Nigeria, we rely on the safeguards the NDPA allows, such as the destination's data protection laws and contractual protections with our providers.

We keep your account data for as long as your account is open. If you close your account, we delete or anonymise your personal data within 30 days, except:

• payment, payout and tax records, which we keep for as long as the law requires;
• information we need to resolve a dispute or prevent fraud.

Certificates already issued may stay verifiable unless you ask us to remove them.

Under the NDPA you can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that's wrong;
• delete your data;
• stop or limit how we use it, or object to a particular use;
• send your data to you or another service in a usable format;
• withdraw consent you have given, at any time.

Email soma@blueverse.africa from your account email. We'll respond within 30 days. If you're unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission (NDPC).

We protect your data with encrypted connections, secure password storage and access controls that limit who can see what. No system is completely secure, so please use a strong password and keep it private. If a breach puts your data at risk, we'll tell you and the NDPC as the law requires.

We use cookies and similar browser storage to keep you signed in, remember your preferences and keep the Platform secure. We may use basic analytics to understand which pages are used. We don't use advertising trackers. Blocking this storage in your browser may stop you from signing in.

BlueVerse is for people aged 16 and over. Users under 18 need a parent or guardian's consent. If you believe a child under 16 has given us their data, contact us and we'll delete it.

We'll update this policy when our practices change and show the new date at the top. If a change is significant, we'll tell you by email or on the Platform.

BlueVerse Africa, Lagos, Nigeria. Email: soma@blueverse.africa