Cravour builds on verified facts and enterprise cryptography. Money moves only after you confirm delivery.
When you pay a listed shop, customer payments are held in custodial escrow through our licensed payment processing partners, Flutterwave (Central Bank of Nigeria licensed Payment Solution Services Provider — PSSP) and Bach. Cravour Technologies Limited is an AI software company, not a deposit-taking bank. Custodial funds are released to the merchant only after you confirm delivery inspection.
Merchant payouts and seller settlements are remitted directly to verified Nigerian commercial bank accounts. Direct transfers require merchant identity verification; unverified search vendors are logged purely as budgeting outflows.
Ad Maker generates copy, posters, and videos grounded strictly in the product specifications and prices you input. Cravour never invents discounts, false claims, or fake testimonials. You inspect and approve all creative assets before sharing.
Platform API credentials and system keys remain securely isolated in Google Cloud Secret Manager. When users connect their own AI keys in Settings (BYOK), keys are encrypted client-side and never shared.
Every connection to cravour.com is encrypted in transit via TLS 1.3 with Strict-Transport-Security (HSTS). Modern Content Security Policies actively protect against unauthorized scripts and clickjacking.
We comply fully with NDPA standards. Merchant creative data and transaction histories are never sold to third-party data brokers. Users maintain the right to export or erase their accounts at any time.
If you discover a potential vulnerability, please report it to our engineering security team at security@cravour.com. We acknowledge all legitimate reports within 24 hours.