Trust & Security
How we protect people who buy, sell and publish here
#NotesApp lets small sellers, professionals and organisations take real money from people they've never met. That only works if buyers can trust the seller and sellers can trust the platform. This page says what we actually do, not what we hope to do.
Your money
- Payments run through Paystack's hosted checkout, a licensed Nigerian payment processor. Card and bank details never touch our servers.
- Held until it's earned. A store buyer's payment is held until they confirm delivery (or 7 days after it is marked delivered). Session earnings are paid 24 hours after the session ends. Digital sales are paid after a 7-day dispute window. Any of these can be frozen while we review a reported problem.
- Sellers and publishers are paid to a bank account whose name we verify first. We store the account name, bank and last four digits, never the full number.
- Every payment event from Paystack is checked against its cryptographic signature before we act on it. Unsigned or altered messages are rejected.
- Refund rules are published before you pay: the booking policy on every booking page, and the Terms.
Your files and content
- Paid digital downloads live in a separate private storage bucket that has no public address. A buyer gets a short-lived download link (valid for one minute) only after paying, and the file is never exposed on a public URL.
- View-only items and courses never expose a file: PDF pages are streamed only to the buyer's signed-in, registered device and drawn in the page, and videos play from Cloudflare Stream with short-lived signed links and downloads switched off. Each purchase is tied to the buyer's account and two devices; a third device is refused and every attempt is counted. This deters sharing and casual copying — it can't stop someone recording their screen.
- Uploads are limited by file type and size, and the size is built into the upload link so it can't be exceeded. Executable files are not accepted.
- Drafts are private to their author; suspension records and appeals are private to the account and to admins.
- Messages can be read only by the two people in the conversation. Pictures, videos, voice notes and documents sent in messages sit in private storage and open only through short-lived links given to those two people.
- Voice and video calls go straight between the two devices and are encrypted on the way (WebRTC, which encrypts every call). On networks that block a direct connection the call passes through Cloudflare's relay, which forwards the encrypted audio and video without being able to listen. We never record calls, and the connection details the two devices exchange are removed when the call ends.
- Moments are seen only by the people you allow: your followers by default, or everyone if you choose that in Moments privacy. Blocking someone hides your moments from them, and moments are deleted when their time is up.
Who can do what
- Access rules are enforced by the database itself, not just the website: money records, orders, payouts and private files can only be changed by our servers, and members can only read their own.
- Those rules have automated tests that run on every change. A test fails if, for example, a member could read someone else's payout or give themselves a higher plan.
- Admin access uses cryptographic claims on the account, not a list of email addresses, and refunds, payouts and freezes can only be done by an admin through our servers.
- Payment, upload, booking and public endpoints are rate-limited to slow down abuse.
Who you're dealing with
- #NotesApp is run by NOTESAPP TECHNOLOGIES LTD, a private company limited by shares registered with the Corporate Affairs Commission (RC 9825642, registered 2 September 2026) and tax-registered with the Nigeria Revenue Service (TIN 2623750527563).
- Gold identity checks are done by Dojah. We receive only a pass or fail result and never store ID numbers, selfies or documents.
- Organisations are checked against their CAC registration before they are marked verified, and are labelled unverified until then.
- Email must be verified before you can pay. Emails are never shown on public profiles.
- Accounts can be suspended with a reason, for a set time or until lifted, and the member can appeal. Reports of nudity or violence reach our team straight away and are reviewed within 24 hours.
Keeping the lights on
- A public status page shows live health for the website, database, sign-in, payments, email, media and our scheduled jobs.
- Errors, on our servers and in your browser, are recorded with personal data removed. Each new kind of error alerts our team the first time it appears.
- Scheduled jobs (reminders, payout release, order release) report in on every run, and the status page turns amber if they stop.
Your data and your rights
- Download a copy of your data, or delete your account, yourself under Account → Your data. Deleting removes your profile, posts, comments, store items and notifications; payment and order records are kept without your personal details because tax and dispute rules require it.
- We follow the Nigeria Data Protection Act's principles: we collect what we need, say why, and let you access, correct, export and delete it. See the Privacy Policy.
- Accepting the Terms and Privacy Policy is recorded before your first payment, and again whenever they change.
What we're still building
We'd rather be plain about the gaps. #NotesApp is a young product: we don't hold ISO or SOC certifications, we haven't yet had an independent penetration test, and the mobile apps and WhatsApp reminders are still ahead of us (see the Roadmap). We are not a bank: payments are processed by Paystack, and we only hold money under the published rules above.
Found a security problem? Please tell us privately through the Contact page before sharing it publicly. See also the Terms, Privacy Policy and live status.