Privacy Policy

What we collect

• Buyers: name, phone number, email if you give one, delivery address, orders, chats and reviews.
• Vendors: everything above, plus your store details, the bank you're paid into (we keep the bank name, the account name and the last 4 digits), and for verification your NIN or BVN check result (we keep the name and the last 4 digits, not the full number), a selfie, and your Instagram handle.
• From your device: basic logs such as pages opened and errors, to keep the app working.

Why we use it

• To run your orders, payments, deliveries and payouts (performing our contract with you).
• To verify vendors and prevent fraud (our legitimate interest and legal duties).
• To send order texts and codes. We only send marketing if you agree, and you can stop it any time.

Who we share it with

We never sell your data. We share only what each service needs:

• The vendor or buyer in your order: name, phone and delivery address.
• Paystack (payments and payouts), Smile ID (ID checks), our SMS provider (codes and order texts), and our hosting and database providers (Supabase, Vercel).
• Police or regulators when the law requires it.

Some of these providers store data outside Nigeria. We only use providers with adequate protection, as the Act requires.

How long we keep it

We keep order and payment records for 6 years for tax and accounting. Verification selfies are deleted 12 months after a vendor closes their store. Other data is deleted or anonymised when it's no longer needed.

Your rights

You can ask to see, correct, download or delete your data, or object to how we use it. Email us and we'll reply within 30 days. Records we must keep by law can't be deleted early.

You can also complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

Contact: hello@buyonraja.com.