Security

Security is core to Valerie. Every store checkout runs through Wavy, and we apply industry-standard controls across our infrastructure, application, and operations.

• Card and bank payments are handled by Wavy — Valerie does not store full card numbers.
• Settlement bank details are encrypted at rest and only used for verified seller payouts.
• Bank transfer proofs are reviewed before order confirmation where manual verification applies.

• Passwords are hashed; we never store plain-text passwords.
• Session tokens expire and can be revoked on password change.
• Admin and seller dashboards require authenticated access.
• Suspicious login and payout changes may trigger additional verification.

• HTTPS/TLS encryption for all traffic to valerie.ng and seller subdomains.
• Regular dependency updates and production hardening.
• Role-based access for internal admin tools and audit logging for sensitive actions.
• Automated backups and monitored hosting on secured servers.

• Store suspension for fraud, counterfeit, or repeated policy violations.
• Order records and receipt IDs for dispute resolution.
• Reporting channels for suspicious listings or accounts.

If you discover a security issue, please report it responsibly to security@valerie.ng. Do not publicly disclose vulnerabilities before we have had reasonable time to remediate. We appreciate coordinated disclosure.

• Use a strong, unique password and do not share dashboard access.
• Verify buyer payments before shipping — never trust unverified screenshots alone.
• Keep your settlement account details accurate and notify us of unauthorised changes.