Privacy Policy

1. Information We Collect

We collect information in three ways:

• Account data — name, email address, username, password hash, and profile photo when you register.
• Transactional data — shipping address, order history, and payment references (we never store raw card numbers; payments are processed by Paystack).
• Usage data — pages visited, search queries, product interactions, and device/browser information collected via standard server logs to improve the service.
• Seller data — store name, logo, product listings, bank account details (for payouts), and any media you upload.

2. How We Use Your Information

• Process and fulfil orders between buyers and sellers.
• Personalise your feed, discovery recommendations, and search results.
• Send transactional emails (order confirmations, shipping updates).
• Detect and prevent fraudulent activity or policy violations.
• Improve our AI-powered product discovery engine using anonymised interaction signals.
• Comply with legal obligations (tax records, fraud investigations) where required by Nigerian law.

We do not sell your personal data to third-party advertisers.

3. Sharing of Data

We share data only where necessary:

• Between buyers and sellers — buyers' shipping addresses and contact information are shared with the seller for the specific order.
• Payment processors — Paystack receives transaction amounts and references to process payments.
• Infrastructure providers — Cloudinary (media hosting), and our cloud server provider store data on our behalf under strict data-processing agreements.
• Legal compliance — we may disclose data if required by a court order or applicable law.

4. Cookies & Tracking

We use essential cookies to keep you logged in and remember your preferences (e.g., language, dark mode). We do not use third-party advertising cookies. You can clear cookies at any time through your browser settings; however, doing so will log you out.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal information is removed within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., order receipts for 7 years under Nigerian tax law).

6. Your Rights

You have the right to:

• Access — request a copy of the data we hold about you.
• Correction — update inaccurate profile or account data at any time via Settings.
• Deletion — request account deletion from Account Settings.
• Portability — request an export of your data in a machine-readable format.
• Objection — opt out of non-essential communications at any time.

To exercise any right, contact us at support@marketx.app.

7. Security

Passwords are hashed using bcrypt and never stored in plain text. All data transmission is encrypted via HTTPS/TLS. Payment credentials are handled exclusively by Paystack and are never stored on our servers.

8. Children's Privacy

Our platform is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy periodically. When we do, we will revise the "Last Updated" date above and, where changes are significant, notify you via email or an in-app banner. Your continued use of the platform after changes constitutes acceptance of the new policy.