Privacy Policy

We collect what’s needed to run your graduation page and nothing gratuitous. We never sell your data. Payments are handled by Paystack, and Wisher never sees or stores your card number. This policy is written to comply with the Nigeria Data Protection Act (NDPA).

Page owners: name, email, phone number, school, course, level, graduation year, gender (to pick your shirt style), password (stored only as a secure hash), and, for payouts, your bank account name and number.

Visitors who sign or send wishes: the name you sign with, optional contact you choose to leave, and the content itself (message, photo, voice note, or video). Cash gift senders: name, optional message, and amount. Card details go directly to Paystack, never to us.

Automatically: the basics any website receives (IP address, browser type) used for security and debugging. We don’t run advertising trackers.

We use a small set of processors, each only for its job:

Supabase: database, authentication, and media storage · Vercel: hosting · Paystack: payment processing and bank transfers · Resend: transactional email (confirmations, password resets). Each processes data under its own security and compliance obligations.

Your page’s visibility follows the privacy setting you chose: Public, Link-only, or Invite-only. Wishes, voice notes, videos, and gift details sent to a page are visible only to the page owner; visitors can’t browse what others sent. Complaint submissions are visible only to the Wisher team.

Under the NDPA you can ask us to show you, correct, or delete the personal data we hold about you. Page owners can delete individual content anytime from their dashboard; deleting your account and page removes your data from the live platform. Signers can remove their own signature within the undo window, or ask the page owner (or us) afterwards. Write to inabot12345@gmail.com for any data request, and we respond within 30 days.

Keepsakes are the product: pages and their content are kept until the owner deletes them. Payment and payout records are retained as long as financial regulations require. Access to production data is limited, credentials are encrypted in transit and at rest, and passwords are never stored in plain text.

If this policy changes materially we’ll say so on the site and update the date above. Questions, complaints, or data requests: inabot12345@gmail.com or the Contact page. Wisher is a product of INABOT.