✦ Information Security

Privacy Policy

Effective Date: October 27, 2026

1. Information Collected

ASTRAVEN collects account information required for legal compliance and financial settlement:

  • Identity information: Full name, username, and verified Nigerian phone number.
  • Authentication records: Email address, encrypted password hashes (managed via Supabase Auth).
  • Financial metadata: Bank name, account number, transfer narration references, and uploaded payment receipts.

2. Data Storage & Encryption

All sensitive financial ledgers and uploaded deposit/support documents are protected with PostgreSQL Row Level Security (RLS) and isolated in private Storage buckets. Plaintext passwords are never stored or logged.

3. Access Controls & Third Parties

Your personal data is accessible only by authorized compliance officers and desk personnel. ASTRAVEN does not sell, rent, or trade your personal data to third-party advertisers. Data is shared with banking settlement rail providers solely to disburse approved withdrawals.

4. User Rights

You have the right to request a statement of your transaction ledger, update your editable profile information, or request account closure by contacting Customer Service.