Privacy
Draft, last changed 6 November 2026
This explains what Civics keeps about you, why, and what you can do about it. We handle personal data in line with the Nigeria Data Protection Act 2023.
What we keep
- Your account: your email address and a protected form of your password.
- Your sites: the words and photos you add, earlier versions of them, and your site’s address.
- From your site’s visitors: orders (name, phone number, delivery address and what they ordered), messages they send through a contact form, and what’s in a bag that hasn’t been ordered yet. A bag holds no names or numbers.
- What you type in the chat: your messages and the text of your site are sent to our AI provider to answer you.
- Reports: what someone says when they report a site, and how to reach them if they choose to tell us.
- Technical details: your internet address, used to stop abuse and limit how often the chat and sign-in can be used. We store it in a scrambled form when counting chat use.
Why we keep it
To run your account and your sites, to pass orders and messages to the site’s owner, to keep Civics safe from abuse, and to meet our legal duties. We don’t sell personal data, and we don’t use it for advertising.
Who handles it for us
These companies run parts of Civics for us, and some of them are outside Nigeria, so your data may be sent abroad:
- Supabase: database, sign-in and file storage.
- Vercel: hosting.
- Anthropic: the AI chat.
- Google Fonts: published sites load their fonts from Google, which sees a visitor’s internet address.
If you own a site
You decide what your site collects from your customers, and you’re responsible for treating their details properly. We store them for you, and we don’t contact your customers.
How long we keep it
We keep your account and sites until you delete them. Bags left behind drop off after 30 days. We keep the last 20 versions of each site. Reports are kept for as long as we need them to deal with abuse.
Your rights
You can ask to see, correct or delete your personal data, ask us to stop using it, or complain to the Nigeria Data Protection Commission. To ask us, use the report page and choose “Something else”.
Cookies
We use one cookie to keep you signed in. We don’t use advertising or tracking cookies. Your work is also kept in your own browser so that it isn’t lost.
Changes
If this changes in a way that matters, we’ll tell you before it applies.