Privacy Policy

Account data (name, email, country, organisation, professional role), authentication metadata (hashed password, session tokens, last sign-in), security telemetry (IP address, user agent, security events), and transaction records processed by Hubtel.

We never store plaintext passwords or plaintext one-time passcodes. OTPs are stored only as salted hashes and are invalidated on use.

To operate your account, deliver entitlements, detect abuse, meet legal obligations and send security notifications. We do not sell personal data.

We use a single httpOnly session cookie for authentication. We do not use third-party advertising cookies.

Account data is retained while your account is active. Audit and security logs are retained for 24 months to support incident investigation.

You may request access, correction, export or deletion of your personal data by contacting privacy@delvein.dev. We respond within 30 days.