Your data and privacy requests

What the app records

Account details; submitted identity, BVN, portrait, address and bank information; account consent; loan records; project locations, calculation assumptions and monitoring evidence; support requests and audit events. Submission does not mean identity or carbon verification has occurred.

Monthly equipment verification

TerraVeri officers record equipment photos, device GPS coordinates and accuracy, visit dates, use status and reports for assigned loans. The loan borrower, funding investor and authorised administrators can view this evidence. Officers see only their assigned work. Borrower–officer chats are private to the assigned participants and administrators. Admin reviews the evidence before it contributes to carbon review; a device location does not prove that GPS or a photo is authentic.

Why it is recorded

To manage your account, prepare identity and project reviews, show your loan schedule, track reported project activity and respond to your requests. The project registration form asks for consent before sharing monitoring details and private evidence with the funding investor and verification staff.

Storage and access

Application records use the connected Postgres database and private documents use Vercel Blob. Document downloads require an authorised session. Investors see linked funded-project records and conservative estimates, rather than another customer's bank or identity documents. Google account information is processed only when Google sign-in is configured and used.

Requests and retention

Open More → Support & privacy in your borrower or investor app to request access, correction, an explanation or deletion review. Staff review applicable financial and carbon-record retention obligations before responding. Sending a request does not immediately erase records.

The final legal retention schedule and formal privacy-policy approval are pending legal review. The app does not claim certification or automatic compliance with a regulatory retention period.

External services

Paystack implementation is deferred. Identity verification, SMS/USSD and carbon registry/verifier connections are not active. In-app requests and notifications do not send an SMS or submit evidence to a registry.