Privacy Policy

Effective date: 9 June 2026  |  Last updated: 9 June 2026

Tradefaire (“Tradefaire,” “we,” “us,” or “our”) operates the Tradefaire mobile application and website at tradefaire.app (together, the “Service”). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have.

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information we collect

1.1 Information you provide

• Account details — name, email address, phone number, username, profile photo, password or authentication credentials, and account preferences.
• Seller and business information — store name, business description, pickup addresses, product listings, pricing, and identity or business verification documents (such as CAC registration details for Nigerian businesses) when you apply to sell on Tradefaire.
• Commerce information — shipping and delivery addresses, order history, cart contents, messages related to orders, dispute information, and wallet activity within the app.
• User-generated content — product photos and videos, stories, reviews, questions, wishlists, and community content you post.
• Communications — messages you send to our support team and feedback you submit.
• Marketing preferences — including whether you opt in to WhatsApp order alerts and the phone number you provide for that purpose.

1.2 Information collected automatically

• Device and app data — device type, operating system, app version, language, and push notification token (FCM).
• Usage and analytics — product and store views, feed impressions, search activity, and interactions with features (for example discovery, communities, and checkout flows).
• Location — approximate or precise location when you grant permission, used for delivery estimates, nearby discovery, and address suggestions. You can disable location in your device settings.
• Diagnostics — crash reports, performance data, and error logs to help us fix issues and improve reliability.
• Log data — IP address, timestamps, and technical logs from our servers and authentication systems.

1.3 Information from third parties

• Sign-in providers — if you use Google Sign-In, we receive basic profile information permitted by your Google account settings.
• Payment processors — Paystack provides payment status and transaction references. We do not store your full card number or CVV; card data is handled by Paystack under their own privacy policy.
• Logistics partners — delivery status, tracking events, and carrier updates related to your shipments.
• Verification services — results of identity or business verification checks where applicable.

2. How we use your information

We use personal information to:

• Create and manage your account and authenticate you;
• Operate the marketplace — listings, search, checkout, orders, and payouts;
• Process payments and wallet transactions;
• Arrange shipping and delivery through logistics partners;
• Send transactional notifications (push, email, in-app, and WhatsApp where you opt in);
• Provide customer support and resolve disputes;
• Verify sellers and reduce fraud, abuse, and policy violations;
• Personalize discovery feeds and show relevant products;
• Measure performance, debug issues, and improve the Service;
• Comply with law, respond to lawful requests, and enforce our Terms;
• Send marketing communications where permitted and where you have not opted out.

3. Legal bases (Nigeria)

Tradefaire is designed for users in Nigeria. We process personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and, where applicable, the Nigeria Data Protection Regulation (NDPR). Depending on the activity, our legal bases include:

• Contract — processing needed to provide the Service you signed up for (accounts, orders, payments, delivery).
• Consent — for example WhatsApp alerts, optional marketing, and precise location where required.
• Legitimate interests — security, fraud prevention, analytics, and product improvement, balanced against your rights.
• Legal obligation — tax, regulatory, or law enforcement requirements.

4. How we share information

We do not sell your personal information. We may share it with:

• Other users — information you choose to make public (profile, listings, reviews) and order details needed to fulfil transactions (for example a seller sees your delivery address for their order).
• Service providers who help us run the Service, including:
  • Supabase (hosting, database, authentication, storage);
  • Google / Firebase (push messaging, crash reporting, performance monitoring, sign-in);
  • Paystack (payment processing);
  • Zoho ZeptoMail (transactional email);
  • Logistics partners such as Fez and Shipbubble (shipping and tracking);
  • Meta (WhatsApp Business API for opted-in message alerts).
• Professional advisers — lawyers, auditors, or insurers where reasonably necessary.
• Authorities — when required by law or to protect rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

Each provider processes data under contractual safeguards and only for the purposes we specify.

5. WhatsApp notifications

If you enable WhatsApp alerts in Settings, we store your opt-in choice and WhatsApp phone number. We may send utility messages about orders (for example new order requests, acceptance reminders, and delivery updates) through the WhatsApp Business Platform operated by Meta Platforms, Inc.

• WhatsApp messaging is optional and off by default;
• You can turn it off anytime in the app or by contacting support;
• Meta processes messages under its own WhatsApp Business Terms and Privacy Policy;
• We log delivery attempts (status, template used, errors) for troubleshooting and compliance.

6. Cookies and similar technologies

Our website may use essential cookies and local storage for basic functionality. The mobile app uses secure storage on your device for session tokens and preferences. Third-party SDKs (Firebase, Supabase) may use similar technologies as described in their policies.

7. Data retention

We keep personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Examples:

• Order and payment records — retained for accounting and dispute periods required by law;
• Account data — until you delete your account, subject to legal holds;
• Marketing opt-out records — retained to honour your preferences;
• Logs and diagnostics — typically retained for a limited period unless needed for security investigations.

8. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS/TLS), access controls, server-side payment verification, and secure authentication. No method of transmission or storage is 100% secure; please use a strong password and keep your device protected.

9. Your rights and choices

Subject to applicable law, you may have the right to:

• Access and receive a copy of your personal data;
• Correct inaccurate information in your profile or by contacting us;
• Delete your account and associated data (subject to legal retention);
• Withdraw consent for optional processing (such as WhatsApp or marketing);
• Object to or restrict certain processing;
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise these rights, email support@tradefaire.app. We may need to verify your identity before responding.

Push notifications — manage in your device settings or Tradefaire notification preferences.
Location — manage in your device privacy settings.
WhatsApp — toggle off in Settings → WhatsApp alerts.

10. Children

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

11. International transfers

Our infrastructure and service providers may process data in Nigeria and other countries. Where data is transferred outside Nigeria, we implement appropriate safeguards consistent with the NDPA.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may also be communicated in the app or by email. Continued use after changes means you accept the updated policy.

13. Contact us