Privacy Policy
This explains what Lumina Catalog collects, why, who else can see it, and how long we keep it. It is written to the Nigeria Data Protection Act 2023 (NDPA).
1. Who is responsible
PECH ENERGY SOLUTIONS LTD (RC 8424221), G34, Alaba International Market, Ojo, Lagos State, is the data controller for the information described in section 2 — the information about sellers who hold an account with us.
For enquiry details that a buyer gives when requesting a quote, the seller whose catalog they used is the controller and we are that seller's processor. Section 5 covers this, because it changes who a buyer should contact.
2. What we collect about sellers
| What | Why | Lawful basis |
|---|---|---|
| Email address and password | To create your account and sign you in | Performance of a contract |
| Name, business name, profile picture, country, city, language | To show your identity in the app and on your catalogs | Performance of a contract |
| Your catalogs, products, photographs, prices and business contact details | These are the service — we store and publish them for you | Performance of a contract |
| Plan, billing term, subscription status and payment reference | To give you the plan you paid for and to renew or cancel it | Performance of a contract |
| Count of AI requests per month | To apply the AI allowance included in your plan | Performance of a contract |
| Support messages and feedback you send us | To answer you and to fix what you report | Legitimate interest in supporting our users |
We do not collect your bank details or full card number. Those go directly to Paystack or Flutterwave at checkout and never reach our servers.
3. Catalog statistics
When someone opens a catalog we record the catalog, the kind of action (a view, a product view, a share, a quote request), the product code where relevant, the website domain the visitor arrived from, and the time. That is the whole record.
We do not record the visitor's IP address, device identifier or location, and we set no analytics or advertising cookies. The statistics tell a seller that a catalog was opened 40 times — never who opened it.
4. Browser storage
We store on your device only:
- a sign-in session, so you are not signed out on every page — strictly necessary;
- your chosen theme, background, language and catalog view mode;
- an unsaved draft of a product you are editing, so a refresh or a mistaken tap does not lose your work.
None of it is used to track you across websites, and none is shared with advertisers. Our host, Vercel, keeps standard server request logs, which include IP addresses, for security and reliability.
5. If you sent a quote request to a seller
Your name, phone number, email address and message were collected for the seller whose catalog you used. They decide how it is handled. To ask for a copy of it, to correct it or to have it deleted, contact that seller — their contact details are on the catalog you used.
If you cannot reach them, write to us at pechenergysolutions@gmail.com and we will pass your request on and, where we are permitted to act, help you. We do not use your enquiry details to market anything to you.
6. Who else sees your data
We do not sell personal data, and we do not share it for advertising. We use the following service providers, each only for the purpose shown:
| Provider | What they do | What they receive |
|---|---|---|
| Supabase | Database, file storage and sign-in | Account details, catalogs, products, quotes, uploaded images |
| Vercel | Website hosting and delivery | Request logs (IP address, browser, page requested) |
| Groq | AI product descriptions and photo reading | Product photos and text you choose to send for AI assistance |
| Paystack | Card, transfer and USSD payments | Name, email and payment details you enter at checkout |
| Flutterwave | Alternative payment methods | Name, email and payment details you enter at checkout |
These providers operate servers outside Nigeria, so your data is transferred abroad. We rely on contractual protections with each provider, as the NDPA permits, and share only what the provider needs to do its job.
We will also disclose data where the law requires it, or to establish or defend a legal claim.
7. AI processing
When you ask the AI to describe a product or read a photograph, that photograph or text is sent to Groq to generate the result. Only what you send for that request is transmitted — not your account, your other products or your customers. We do not send buyer enquiry details to any AI provider.
8. Publication is public
A published catalog is a public web page. Anything you put in it — product photographs, prices, your business name, your phone number — can be seen by anyone with the link and may be indexed by search engines. Use passcode or invite-only access if that is not what you want, and do not put anything in a catalog that you would not put on a public website.
9. How long we keep things
- Deleted catalogs and products — recoverable for 7 days, then permanently destroyed. Deleting permanently skips the 7 days.
- Account data — for as long as your account is open, and deleted within 30 days of you closing it.
- Quotes and invoices — kept while the catalog exists, and deleted with it.
- Payment records — kept for 6 years to meet tax and accounting obligations, even after an account closes.
- Catalog statistics — kept while the catalog exists. They identify no one.
10. Security
Traffic is encrypted in transit. Every database table enforces row-level security, so one seller's account cannot read another's, and public catalog pages are served through controlled functions rather than direct database access. Passwords are stored hashed; we cannot read yours.
No system is perfectly secure. If a breach affects your personal data we will notify you and the Nigeria Data Protection Commission as the NDPA requires.
11. Your rights
Under the NDPA you may ask us to:
- give you a copy of the personal data we hold about you;
- correct anything inaccurate;
- delete your data, where we are not required to keep it;
- restrict or object to a particular use;
- provide your data in a portable form;
- withdraw consent, where we relied on consent.
Write to pechenergysolutions@gmail.com. We respond within 30 days. If you are unhappy with our response you may complain to the Nigeria Data Protection Commission (NDPC).
12. Children
Lumina Catalog is for businesses and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, tell us and we will delete it.
13. Changes
If we change this policy materially we will give at least 30 days' notice by email or in the app. The date at the foot of this page always shows when it last changed.
14. Contact
PECH ENERGY SOLUTIONS LTD
Email: pechenergysolutions@gmail.com
WhatsApp: 0816 401 8740