Privacy Policy

Last updated: October 28, 2026

PillVera ("we", "us") provides drug, doctor, and manufacturer verification services in Nigeria. This policy explains what information we collect, why, and how it's handled, across our three kinds of users: consumers using the free checker, business API clients, and manufacturers.

1. What we collect

• Consumers: your email address (to verify you're a real person and enforce free-check limits), the drugs/queries you check, and your IP address and device fingerprint (to apply fair-use limits).
• API clients: business name, contact details, email, phone, and every verification call you make (query value, result, timestamp) — kept so you have a usage record and so we can bill correctly.
• Manufacturers: company name, contact details, CAC/NAFDAC registration numbers you provide for identity verification, and the products you claim.
• Everyone: standard technical data (IP address, browser) logged for security and abuse prevention.

2. Why we collect it

To provide the verification service itself, to enforce free-tier and pay-per-use limits fairly, to prevent abuse and fraud (e.g. someone falsely claiming a manufacturer account), to bill API clients accurately, and to improve the accuracy of our cached doctor/drug records over time.

3. What we don't do

We do not sell your personal data. We do not share individual consumer query history with third parties. We do not use your health-related searches (which drugs you checked) for advertising.

4. Who sees what

Verification results you look up are specific to your request — we don't publish "who searched for what." Aggregate, de-identified statistics (e.g. "X checks performed this month") may be used internally or shared with regulators on request.

5. Data retention

Verification logs are kept for billing, audit, and fraud-prevention purposes. Account data is kept while your account is active; you can request deletion of your account and associated personal data by contacting us, subject to retention needed for legal/financial record-keeping.

6. Security

Passwords are hashed, never stored in plain text. API keys are treated as secrets — don't share yours; if it's exposed, contact us for a reset. We apply standard safeguards (account lockout after repeated failed logins, CSRF protection on forms, encrypted connections) across the platform.

7. Your rights

You can request a copy of the personal data we hold about you, request corrections, or request deletion of your account, by contacting us using the details below.

8. Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected by updating the "Last updated" date above.

9. Contact

Questions about this policy? Email us at hi@pillvera.com.