Privacy Policy

Effective date: 27 June 2026. Last updated: 19 September 2026

Tradefaire Technologies Ltd ("Tradefaire," "we," "us," or "our") operates the Tradefaire mobile application and website at tradefaire.app (together, the "Service"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have.

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information we collect

1.1 Information you provide

• Account details - name, username, email address, phone number, profile photo, cover photo, bio, shopping or selling interests, password or sign-in credentials, and account preferences.
• Seller and business information - store name and handle, business description, pickup addresses, product listings and pricing, and business registration details when you verify a business.
• Commerce information - shipping and delivery addresses, order history, cart contents, payment references, order and wallet receipts, escrow and refund records, dispute information, wallet activity, payout bank details (bank name, account name, and account number), and dispatch photos.
• User-generated content - product photos and videos, stories, reviews, questions, wishlists, and community content you post.
• Communications - messages you send to our support team, including in-app support tickets and emails.
• Notification preferences - including push categories (orders, payments, community, and system), whether you opt in to order alerts on messaging channels, and the phone number you provide for that purpose.

1.2 Information collected automatically

• Device and app data - push notification token and the device platform it belongs to (iOS or Android). Crash and performance tools may also receive device type, operating system, and app version.
• Usage and analytics - product and store views, feed impressions and taps, search queries, story interactions, and interactions with features such as discovery, communities, and checkout. Search queries and some view events are stored on our servers.
• Location - when you grant permission, we may collect precise coordinates and a resolved address and store them on your profile. We use the resolved state for discovery ranking and address suggestions. If a seller uses live pickup when handing an order to a carrier, we send those live coordinates to the logistics partner for collection. You can disable location in your device settings.
• Camera, microphone, and photo library - accessed only when you choose to take or upload photos or videos for listings, stories, reviews, dispatch photos, or your profile. Microphone is used only while recording video with sound. We do not access your camera, microphone, or gallery in the background.
• Diagnostics and logs - crash reports, performance data, error logs, and timestamps. IP address may be used to rate-limit anonymous search; for those checks we may store an IP-derived key in a short-lived rate-limit table.

1.3 Information from third parties

• Sign-in providers - if you use Google Sign-In or Sign in with Apple, we receive the basic profile information permitted by your account settings.
• Payment processors - Paystack provides payment status and transaction references. We do not store your full card number or CVV; card data is handled by Paystack under its own privacy policy.
• Maps and geocoding - Google Maps and OpenStreetMap (Nominatim) return address details when you use current location or address suggestions.
• Logistics partners - delivery status, tracking events, and carrier updates for your shipments.
• Crash and performance reporting - Google Crashlytics and Performance may receive device type, operating system, app version, and diagnostic data when the app crashes or is slow.
• Identity verification services - results of identity or business verification checks (see Section 2).

2. Identity verification (BVN, NIN, CAC)

Sellers must verify their identity before they can list products or withdraw funds. Buyers are not required to complete identity verification to purchase. Depending on the verification type, we collect your Bank Verification Number (BVN), National Identification Number (NIN), or Corporate Affairs Commission (CAC) registration number. Our licensed identity verification provider returns a verification result and related identity details, which may include legal name, date of birth, gender, phone number, residential address, and state of origin (and, for CAC, company name, status, and address). We store those details, together with the provider's response, with restricted access.

• These identifiers and verification details are used for identity and business verification, fraud prevention, and compliance with our legal obligations.
• They are stored securely while your account is active. If you delete your account, these KYC records are deleted with it, unless the law requires us to keep them for a longer period.

3. How we use your information

We use personal information to: create and manage your account and authenticate you (including optional biometric unlock on your device); operate the marketplace (listings, search, checkout, orders, escrow, payouts); process payments and wallet transactions; arrange shipping and delivery; send transactional notifications (push, email, in-app, and opt-in message alerts); provide customer support and resolve disputes; verify identity and reduce fraud, abuse, and policy violations; personalise discovery feeds using your interests, location state, and in-app activity; measure performance, debug issues, and improve the Service; and comply with law (including anti-money-laundering and tax obligations) and enforce our Terms.

Some processing is automated - for example, feed personalisation and search ranking. We also apply identity-verification gates, payment checks, rate limits, and escrow holds to reduce abuse. Decisions with significant effects (such as dispute outcomes or account suspension) involve human review.

4. Legal bases (Nigeria)

We process personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and, where applicable, the Nigeria Data Protection Regulation (NDPR). Depending on the activity, our legal bases are:

• Contract - processing needed to provide the Service you signed up for (accounts, orders, escrow, payments, delivery).
• Consent - for example opt-in message alerts and precise location.
• Legitimate interests - security, fraud prevention, analytics, and product improvement, balanced against your rights.
• Legal obligation - tax, anti-money-laundering, regulatory, or law-enforcement requirements.

5. How we share information

We do not sell your personal information. We share it with:

• Other users - information you choose to make public (profile, listings, reviews, community posts) and the limited order information needed to fulfil transactions (see Section 6 for how addresses are handled).
• Service providers who process data on our behalf under contractual safeguards, in these categories: payment processing (Paystack); cloud hosting, database, authentication, and storage; push messaging, crash reporting, and Google sign-in (Google); Apple sign-in (Apple); maps and geocoding (Google Maps and OpenStreetMap); identity and business verification; transactional email; logistics and delivery partners; and messaging platforms for opt-in alerts (WhatsApp, operated by Meta).
• Professional advisers - lawyers, auditors, or insurers where reasonably necessary.
• Authorities - when required by law or to protect rights, safety, and security.
• Business transfers - in a merger, acquisition, or sale of assets, subject to this policy.

6. How addresses are protected

Address privacy is built into the product:

• Buyers provide a full delivery address at checkout.
• Sellers see only the delivery city and state for their orders - not your full street address or contact details.
• Logistics partners receive the full delivery address, because they need it to deliver your order. If the seller uses live pickup, they also receive the seller's live pickup coordinates.
• Sellers' saved pickup addresses are likewise shared with logistics partners for collection, and are not published to buyers.

7. Optional message alerts

If you enable message alerts (for example WhatsApp alerts) in Settings, we store your opt-in choice and phone number, and send utility messages about your orders (new order requests, acceptance reminders, delivery updates). Alerts are optional and off by default; you can turn them off anytime in Settings or by contacting support. Messages sent over WhatsApp are processed by Meta under its own business terms and privacy policy. We log delivery attempts (status, template, phone number, and errors) for troubleshooting and compliance. If you delete your account, the log may keep the phone number used for the message, unlinked from your profile.

8. Cookies and similar technologies

The marketing website at tradefaire.app uses local storage for basic site functionality. The mobile app uses secure on-device storage for session tokens, notification preferences, and, if you enable biometric sign-in, the credentials needed to unlock the app on that device. Third-party SDKs we use for sign-in, maps, messaging, and diagnostics may use cookies or similar technologies as described in their own policies.

9. Data retention

We keep personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Indicative periods:

• Order, payment, escrow, and payout records - retained after account deletion, with the account identifier unlinked. Payout records include the bank name, account name, and account number used for the withdrawal. Order records may include the delivery address snapshot.
• Identity verification records (BVN/NIN/CAC) - kept while your account is active and deleted when the account is deleted, unless the law requires a longer period.
• Dispute records - deleted when the account is deleted, unless a legal hold applies.
• Account and profile data - until you delete your account, then removed except where a legal hold, open escrow, or retention obligation applies.
• Explore search events and read in-app notifications - typically deleted after 90 days. Product views, store views, feed events, and other search logs may be kept longer, including after account deletion with the account identifier unlinked.
• WhatsApp delivery logs - may be retained after account deletion. The log can still hold the phone number used for the message after it is unlinked from your profile.

When you delete your account: you must first spend or withdraw any wallet balance and wait for open escrow orders to finish. After that, your profile, listings, KYC records, disputes, and public content are removed. Completed orders, payments, payouts, some search and view events, and WhatsApp delivery logs may remain. Remaining records are unlinked from your account identifier; they can still contain details such as payout bank details, a delivery address snapshot, or a WhatsApp number.

10. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS/TLS), access controls, server-side payment verification, secure authentication, and monitoring. No method of transmission or storage is 100% secure; please use a strong password and keep your device protected.

11. Your rights and choices

Subject to applicable law, you may: access and receive a copy of your personal data; correct inaccurate information; delete your Tradefaire account and associated data (subject to Section 9); withdraw consent for optional processing; object to or restrict certain processing; and lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise these rights, email support@tradefaire.app. We may need to verify your identity before responding, and we aim to respond within the timelines required by the NDPA.

• Push notifications - manage in device settings or Tradefaire notification preferences.
• Location - manage in device privacy settings.
• Message alerts - toggle off in Settings.
• Biometric sign-in - turn off in Settings; this removes the credentials stored on that device for unlock.

Delete your Tradefaire account

You can request deletion of your Tradefaire account and associated personal data at any time. Tradefaire Technologies Ltd will process that request as set out below.

How to request deletion

1. In the Tradefaire app: open Settings → Delete account. Type DELETE to confirm. The app will close the account if you have no wallet balance and no open escrow orders.
2. Without the app: email support@tradefaire.app from the email address on the account, with the subject line Delete my Tradefaire account. We may ask you to verify that you control the account before we delete it.

What we delete

After deletion is complete, we remove your profile, listings, KYC records, disputes, and public content from Tradefaire.

What we may keep

You must first spend or withdraw any wallet balance and wait for open escrow orders to finish. Completed orders, payments, payouts, some search and view events, and WhatsApp delivery logs may remain, unlinked from your account identifier, as described in Section 9. Those remaining records can still contain details such as payout bank details, a delivery address snapshot, or a WhatsApp number where the law requires us to keep them.

12. Children

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

13. International transfers

Our infrastructure and service providers may process data in Nigeria and other countries. Where data is transferred outside Nigeria, we implement safeguards consistent with the NDPA.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may also be communicated in the app or by email.

15. Contact us