Privacy Policy
Effective October 11, 2026. Operated by Scion Software.
This policy explains what personal data Yuti collects, why we collect it, who we share it with, how long we keep it and what choices you have. It is written to be read, so each section stands on its own.
1. Who we are and what this policy covers
Scion Software operates Yuti and is responsible for the personal data described in this policy. You can reach us at support@yuti.com.ng.
This policy covers the Yuti website, the installable web app and any mobile apps we publish. We process personal data in line with the Nigeria Data Protection Act 2023 and other Nigerian law that applies to us.
2. What we collect and why
The table lists each kind of information, what it includes, why we use it and where it comes from.
| Information | What it includes | Why we use it | Where it comes from |
|---|---|---|---|
| Account details | Name, email address, phone number, password (held by our sign-in provider in protected form, never in plain text), role (buyer, seller or both), profile photo, verification status. | To create and secure your account, contact you about orders and show your name to the other person in an order. | You |
| Store details | Store name, web address, description, category, logo, banner, colours, state, address, map coordinates, delivery fees, availability. | To publish your storefront, work out delivery fees and show stores near buyers. | Sellers |
| Payout details | Bank name, bank code, account number, account name, the payout (subaccount) code from Paystack, subscription codes. | To verify your bank account with Paystack, pay you for sales and manage your subscription. | Sellers |
| Delivery addresses | Label, country, state, area, house address and, where you allow it, map coordinates. | To deliver orders and to find listings near you. | Buyers |
| Orders and transactions | Items, quantities, prices, notes, order status, delivery address, payment reference, amounts, fees, delivery codes and whether they were used, ledger entries. | To process orders and payments, confirm delivery, refund buyers, handle disputes and keep accounts. | You and our systems |
| Payment information | Card or bank details you type into Paystack's payment window go to Paystack. We receive the result (status, reference, amount, channel), not your full card number. | To confirm that an order was paid. | Paystack |
| Messages | Message text, time sent and whether it was read. | To let buyers and sellers talk, and to investigate abuse or disputes. | Users |
| Reviews and ratings | Star rating, comment and optional photo. | To show reviews on products and stores. | Buyers |
| Activity | Items in your cart, followed stores, saved products and, where this feature is turned on, recent searches. | To run the features you use. | You |
| Store views | Which store page was viewed, the date and a random viewer key. The key does not contain your name. | To count store views for sellers. | Automatic |
| Notifications and devices | Notification records, and the push address and keys your browser gives us when you allow notifications. | To send order updates and alerts. | You and your browser |
| Location | Your device location when you allow it, and the coordinates saved on addresses and stores. | To show nearby results and ads, and to fill in an address. | Your device, with permission |
| Images | Product, store and profile images you upload. | To display your listings and profile. | You |
| Promotions | Ad title, image, link, target area, plan, status and payment reference. | To run paid promotion. | Sellers |
| Technical data | IP address, device and browser type, pages requested, error logs and payment event logs kept by our hosting and systems. | To keep Yuti secure, find faults and prevent fraud. | Automatic |
You choose what to enter. Some features will not work without the related information, for example we cannot pay a seller without payout details.
3. How we use your information
- To run the marketplace: accounts, stores, orders, payments, delivery codes and receipts.
- To connect buyers and sellers, including sharing the details a seller needs to fulfil an order.
- To verify sellers' bank accounts and pay them.
- To refund buyers, review disputes, prevent fraud and keep Yuti safe.
- To send service messages and notifications such as order updates. We send marketing email only if you have agreed, and you can unsubscribe at any time.
- To show relevant listings and ads for your area.
- To understand how Yuti is used and improve it, using counts and totals wherever we can.
- To meet our legal obligations and answer support requests.
Our reasons for using personal data are: to carry out our contract with you; your consent, for location, notifications and marketing; our legitimate interests in security, fraud prevention and improving the service; and legal obligations. You can withdraw consent at any time without affecting what we did before.
4. Who we share information with
We do not sell your personal data. We share it with the services we need to run Yuti and with other users as the service requires.
| Recipient | What they receive | Purpose |
|---|---|---|
| Paystack | Name, email, phone, amount, order reference and, for sellers, bank details. | Payment processing, refunds, seller payouts, bank verification and subscriptions. |
| Supabase | Account and marketplace data stored in our database. | Database, sign-in and real-time features. |
| Vercel | Requests to the site, including IP address and logs. | Hosting the website and app. |
| Cloudinary | Images you upload. | Storing and delivering images. |
| Resend | Your email address and the content of emails we send you. | Sending account and service emails. |
| OpenStreetMap (Nominatim) | Address text or coordinates you enter. | Looking up addresses and map positions. |
| Browser push services (for example Google, Apple, Mozilla) | Your push address and notification content. | Delivering notifications to your device. |
| Other users | Sellers see a buyer's name, phone number and delivery address for orders they must fulfil. Buyers see a store's public details. Message participants see their messages. Reviews are shown publicly. | Making orders and conversations work. |
| Authorities and advisers | Information we are legally required to share, or that our lawyers and auditors need. | Legal compliance and protecting our rights. |
If Yuti is ever sold or merged, personal data may be passed to the new owner, who must respect this policy. We do not use third-party advertising or tracking tools on Yuti today. If that changes we will update this policy first.
5. Cookies, local storage and similar technologies
Yuti uses storage in your browser to work properly. It is not used for third-party advertising.
- Sign-in session: keeps you signed in.
- Preferences: your light or dark theme and whether the side menu is collapsed.
- Remembered profile: your name, email and photo kept on your device so the welcome back screen can offer a quick return. Choosing Sign in with another account clears it.
- App cache: the installed web app saves files on your device so it loads faster and works with a weak connection.
- Notification permission: your browser remembers whether you allowed notifications.
You can clear this storage in your browser settings. You may be signed out and some features will reset.
6. Location
Yuti asks to use your location only when a feature needs it, for example to fill your delivery address or to show stores and ads near you. You can say no, and Yuti will still work with untargeted content. You can change the permission in your browser or device settings at any time.
7. Where your data is processed
Our providers may store and process data in countries outside Nigeria. We choose providers that protect data with appropriate safeguards, and we share only what each one needs.
8. How long we keep information
- Account, store and profile data: while your account is active.
- Orders, payments and refund records: for as long as the law, tax rules or the time limits for disputes and claims require.
- Messages and reviews: while the accounts involved exist, unless we remove them for breaking the Terms.
- Technical and payment event logs: for a limited period needed to keep the service secure and fix faults, then removed.
- Push addresses: until you turn notifications off or the address stops working.
When you delete your account we remove or anonymise your personal data, normally within 30 days, except for records we must keep as described above. Copies in backups are removed as backups are replaced in the normal cycle.
9. Your rights and how to use them
You have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data, or to limit or stop certain uses of it;
- receive your data in a common format where this applies;
- withdraw consent for location, notifications or marketing at any time;
- complain to the Nigeria Data Protection Commission if you think we have mishandled your data.
To use these rights, email support@yuti.com.ng. We may ask you to confirm who you are first, and we normally reply within 30 days. You can also close your account yourself in Settings by choosing Delete account. Some records, such as completed transactions, may need to be kept after a deletion request to meet legal obligations, and we will tell you if we cannot delete something.
10. How we protect your data
- Connections to Yuti use HTTPS.
- Access controls in our database mean users can read and change only the data that belongs to them or that the service lets them see.
- Card details are handled by Paystack and never stored by Yuti.
- Secret keys and administrator access are kept on the server and are limited to the people who need them.
- We limit request rates and keep event logs to spot and respond to abuse.
No system is completely secure. Keep your password private and sign out of shared devices. If a breach affects your data, we will tell you and the regulator where the law requires.
11. Children
Yuti is not directed at children and we do not knowingly collect personal data from children under 13. Anyone under the age of majority should use Yuti only with the involvement of a parent or guardian. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy. The effective date at the top shows when it last changed. For material changes we will tell you in the app, on the website or by email.
13. Contact and complaints
Questions, requests and complaints: support@yuti.com.ng. You may also contact the Nigeria Data Protection Commission.
Related: Terms of Service · Refund Policy