Privacy policy

Crevli is operated by Femi Oyinloye in Nigeria. This notice explains how we handle personal information when you visit crevli.com, contact us, create an account or use our client workspace. Femi Oyinloye is responsible for those processing activities. For privacy, deletion and support requests, contact support@crevli.com.

For a client project in which we process information on your instructions, the project agreement should specify each party’s responsibilities and any required data-processing terms. This website notice does not replace those terms.

We collect information you choose to provide: your name and contact details, account/profile information (including country, timezone, company and website if provided) and photo, enquiries and chat messages, project requirements, files and links you upload, proposals and approvals, project communications, delivery/revision feedback and reviews. Please only send information you are entitled to share; do not send passwords, payment-card details or unnecessary sensitive personal information through chat.

If you use Google sign-in, Google and our authentication provider supply account identifiers and basic profile information, such as your name, email address and profile image, to authenticate you and create or link your Crevli account. The Google sign-in request made by our website is for account authentication, not access to your Gmail messages, Google Drive files or contacts.

We also process session identifiers, authentication events, timestamps, presence/online status and technical request information needed to operate and protect the service. Our hosting and authentication providers may process IP addresses, device/browser information and security or diagnostic logs.

We use account, enquiry and project information to respond to requests, take steps you request before a contract and deliver agreed services. We use necessary session information to keep you signed in and connect you with your own conversations. We use security, operational and limited presence information for legitimate interests in protecting the website, preventing abuse and managing support, subject to your rights. We may retain information where required by an applicable legal obligation or to establish, exercise or defend legal claims. Where a feature requires consent, we will request it separately and explain how to withdraw it; visiting this website is not blanket consent to unrelated processing.

The website uses authentication and guest-session cookies, and browser storage for functions such as chat-draft continuity, appearance preferences, interface preferences and install-prompt state. Clearing or blocking this storage can sign you out, remove unsent drafts or interrupt access to a guest conversation. Cookie/session expiry does not mean that messages already sent to us have been deleted. Editing or removing a message from the conversation view may leave its previous text in restricted audit history.

Hosting and authentication providers may keep technical and security logs when operating the website.

Authorized people working on your enquiry or project access information needed for that work. When you contact us by email, our email service provider processes that correspondence to deliver and store it. Our website uses Vercel for hosting and Supabase for authentication, database, file storage and realtime features. Google processes sign-in information when you choose Google sign-in. Service providers process information needed for their services under their applicable terms. We may disclose information when legally required or reasonably necessary to protect rights and security.

A review you choose to submit for publication may display its review name, rating, review text and our response publicly. Private chat messages and project files are not intended for public display. External sites you choose to visit from our links have their own privacy practices.

Live online payment checkout is not currently available on this website. Payment arrangements for a project must be confirmed separately; do not send card details through chat.

When enabled, Crevli Assistant is an AI receptionist for newly started eligible guest conversations. It helps understand your enquiry, identify relevant published services and collect initial requirements for our team. We send a limited recent chat-text history and public service information to OpenAI through its API. Text you type may include personal information; do not send passwords, payment credentials or sensitive information. This receptionist does not send uploaded file contents to the model. Existing conversations are not automatically enrolled when AI is switched on. Clear notice appears before you send a guest message. If you prefer not to use AI, contact support@crevli.com before sending; you can also request our team in the chat to stop further AI replies. Staff confirm quotes, deadlines and project commitments. AI may make mistakes and is not a final decision-maker. We retain conversation and usage/security records as described below. Our API requests disable response storage, but this does not promise that OpenAI keeps no security or abuse-monitoring records. Provider processing may occur outside Nigeria. We do not use client conversations for AI training or testing merely because you use chat.

Our service providers process information outside Nigeria. Our main Supabase project is hosted in Ireland, and our Vercel application functions are configured for Dublin, Ireland. Content delivery, security, support and provider subprocessors may involve other countries; these regions do not mean all processing stays in Ireland. Provider terms describe their processing and international-transfer arrangements. Contact support@crevli.com for information about the arrangements relevant to your information.

We use access controls and other technical measures to protect information, but no system can guarantee absolute security. Our retention policy is to keep personal information only while needed to handle your enquiry, maintain your account, deliver the project and manage necessary follow-up, or for justified legal, dispute and security records. We handle deletion requests through support@crevli.com and assess whether information is still needed or must lawfully be retained. This does not mean every record is automatically erased when an account closes or a message is removed.

Subject to applicable law, you can request access to your personal information, correction, deletion, restriction, portability or object to processing. You can withdraw consent where processing relies on consent, without affecting earlier lawful processing. You may also challenge decisions based solely on automated processing where the law provides that right.

Contact support@crevli.com with your request. We may need proportionate information to verify your identity and protect other people’s information. We will explain any lawful reason we cannot fully comply. Deleting cookies or signing out is not an account-deletion request. You may complain to the Nigeria Data Protection Commission at https://ndpc.gov.ng/ without first being required to waive any other rights.

Account registration is for adults aged 18 or over. Crevli’s professional services are not directed at children. If you believe a child has supplied personal information, contact us so we can assess and address it.

We will update this notice when our practices change and show its effective date. Material new uses of information will be explained before they begin, with consent where required.