Home Privacy Policy
Last updated: April 2026 ~6 min read

Privacy Policy

We collect only what we need, we don't sell your data, and we're transparent about how it's used. Here's the full picture.

01

Information We Collect

We collect information you provide directly and information generated through your use of the Platform.

Account information:

  • Full name and email address
  • Mobile phone number (used for payment processing)
  • Profile photo, if you choose to upload one
  • KYC documents, if you choose to verify your identity

Transaction information:

  • Order history and payment records
  • Wallet top-up and withdrawal history
  • Escrow transaction records

Technical information:

  • IP address and general device type
  • Login timestamps and session data
  • Browser type and operating system
  • Pages visited and features used
02

How We Use Your Information

We use your information to:

  • Provide and improve our marketplace services
  • Process payments and manage escrow transactions
  • Send order updates, notifications, and security alerts
  • Verify identity and prevent fraud
  • Resolve disputes between buyers and sellers
  • Comply with applicable legal obligations
  • Analyse platform usage patterns to improve the user experience

We do not use your data for targeted advertising and we do not sell it to third parties.

03

Information Sharing

We do not sell your personal information. We share data only in the following limited circumstances:

  • Payment Processors (Fapshi): To process mobile money deposits and withdrawals.
  • Communication Services: If you connect your Telegram account for order notifications.
  • Legal Authorities: When required by law, court order, or to prevent fraud.
  • Other Users: Your public profile — name and rating — is visible to other users. Your email, phone number, and financial details are never shared.

We never share your email address, phone number, or payment details with other users or third-party advertisers.

04

Data Security

We implement industry-standard security measures to protect your data:

  • All passwords are hashed using bcrypt — we cannot see your password
  • Sessions are protected with HTTPS/TLS encryption in transit
  • Two-factor authentication (2FA) is available for all accounts
  • Active session monitoring and suspicious activity logging
  • Regular security reviews of our codebase and infrastructure

While we work hard to protect your data, no internet transmission is 100% secure. You are responsible for keeping your login credentials confidential.

05

Cookies & Tracking

We use cookies and similar technologies to maintain your login session, remember your preferences, and protect against security attacks. We use analytics cookies to understand how the platform is used — the data is aggregated and anonymous.

For a full breakdown of exactly which cookies we use and how to control them, see our Cookies Policy.

06

Your Rights

You have the following rights over your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Update inaccurate information directly in your profile settings, or contact us.
  • Deletion: Request deletion of your account and associated personal data.
  • Portability: Export your transaction history via CSV from your account settings.
  • Objection: Opt out of non-essential communications via your notification settings.

To exercise any of these rights, open a support ticket or contact us on Telegram. We'll respond within 5 business days.

07

Data Retention

We keep your data for as long as your account is active. After account deletion:

  • Personal information is anonymised within 30 days
  • Transaction records are retained for 7 years for legal compliance
  • Security logs are retained for 12 months

You can request deletion at any time. We will process deletion requests within 30 days, subject to any legal retention obligations.

08

Contact Us

For privacy-related enquiries or to exercise your data rights, get in touch:

Privacy & data requests

We aim to respond to all privacy requests within 5 business days.