Data Protection & Privacy Commitment

Privacy Policy

Last updated: September 2026. This policy governs Rabuni Shops platform services, merchant dashboards, and hosted merchant storefronts.

Who We Are & Scope

Rabuni Shops ("Rabuni", "we", "us", or "our") provides an all-in-one e-commerce storefront platform empowering retail merchants, fashion creators, restaurants, and service providers to operate online stores and receive customer orders via WhatsApp and web checkout.

This Privacy Policy explains how we collect, store, process, and protect personal information across:

Our primary marketing website (rabuni.shop).
The merchant management dashboard (app.rabuni.shop).
Merchant storefronts hosted under Rabuni subdomains (*.rabuni.shop) and connected custom domains.
Our integrated social publishing and developer APIs (including TikTok and Meta integrations).

Information We Collect

From Store Merchants

Name, email address, phone/WhatsApp number, store name, business category, logo/media, product catalog details, and Mobile Money or bank payout destination accounts.

From Shoppers & Buyers

Customer name, contact phone/WhatsApp number, delivery address, cart item details, special delivery instructions, and payment transaction reference tokens.

We Never Store Your Sensitive Payment Credentials

Rabuni does NOT store or process your credit/debit card numbers, CVV codes, or Mobile Money PINs. All payment transactions are handled directly through certified, PCI-DSS compliant third-party gateways (Paystack, MTN Mobile Money, Telecel Cash, and AirtelTigo).

Social Media Integrations & TikTok API Disclosure

Rabuni provides optional marketing publishing integrations allowing merchants to connect external social media accounts, including **TikTok** (via TikTok Login Kit and Content Posting API) and **Meta** (Instagram Business API).

TikTok for Developers & Content Posting Scopes

When a merchant authorizes Rabuni via TikTok Login Kit, our application requests access solely to the following permissions:

user.info.basic: Used exclusively to retrieve your TikTok account display name, avatar, and Open ID so you can verify which TikTok account is connected in your Rabuni dashboard.
video.upload: Used solely when you click "Upload Draft to TikTok" to send product marketing videos or flyers directly to your TikTok account as an unpublished draft for further editing and sound addition.
video.publish: Used only when you explicitly confirm "Publish Directly to TikTok Profile" to post authorized product marketing content to your public feed.

We do not access your private messages, follower lists, or other personal account data. You can disconnect Rabuni from your TikTok account settings at any time, which immediately revokes our access tokens.

How We Use Your Information

Order Fulfillment: Routing order details to the merchant's WhatsApp and dashboard to prepare and deliver purchases.
Payment Verification: Verifying transaction authenticity with Paystack and Mobile Money providers to avoid fraudulent orders.
Search Engine Syndication: Generating dynamic sitemaps and schema.org structured data so merchant stores and products rank effectively on Google and search engines.
Store Customization: Storing merchant theme settings, domain routing, and banner configurations.
Security & Fraud Prevention: Protecting merchants and shoppers against malicious actors, chargebacks, and unauthorized store cloning.

Data Sharing & Third-Party Services

We never sell, rent, or trade personal data to third-party advertisers or data brokers. Data is only shared with trusted service providers strictly necessary to execute our services:

Database & Cloud Infrastructure: Supabase (PostgreSQL with SSL encryption at rest and in transit) and Vercel Edge Network.
Payment Processors: Paystack, MTN MoMo, Telecel, and AirtelTigo for secure monetary settlements.
Communication Gateways: WhatsApp / Meta for merchant order notifications when chosen by the user.
Social Media APIs: TikTok and Instagram APIs strictly upon direct merchant authorization.

Your Rights & Data Deletion (Act 843 & GDPR)

In compliance with the **Data Protection Act of Ghana (Act 843)** and international standards, you have the following rights:

Right of Access: Request a copy of the personal information stored in your merchant account.
Right to Rectification: Edit or update inaccurate information directly through your dashboard settings.
Right to Erasure ("Right to be Forgotten"): Request the permanent deletion of your merchant account, store catalog, and associated customer order history.
Revocation of Consent: Disconnect any linked social accounts (TikTok, Instagram, WhatsApp) at any time.

Contact Our Privacy & Legal Team

If you have any questions about this Privacy Policy, wish to exercise your data rights, or request account deletion, please contact us directly:

Platform: Rabuni Shops (rabuni.shop)

Privacy Email: privacy@rabuni.shop

Merchant Support: support@rabuni.shop

Back to Home