Privacy Policy

• Account data: name, email, password hash, handle, user category.
• Profile data: location, bio, profile photo, social links, service tags, portfolio uploads.
• Transaction data: listings, trade interactions, reviews, support tickets.
• Verification data: identity verification records and status outcomes.
• Payment data: when you buy a subscription or in-app credits, payment is processed by our payment provider (Paystack). We do not store full card details; we receive a transaction reference and status.
• Technical data: IP address, device/browser metadata, security logs, device push tokens (for notifications).
• Diagnostics: crash and performance data (via Sentry) when enabled, to keep our apps stable. This is not linked to your identity.
• Consent records: policy versions accepted, timestamp, and preference history.

• To provide account access, platform features, support, and security controls.
• To perform our contractual obligations and prevent fraud/abuse.
• To comply with legal and regulatory obligations.
• To send platform updates and, where you opt in, marketing communications.

We rely on lawful bases including:

• Consent (for optional marketing and specific processing activities).
• Contract necessity (account and service delivery).
• Legal obligation (regulatory and lawful disclosure requirements).
• Legitimate interests (security, fraud prevention, service reliability).

Subject to applicable law, you may:

• Request access to your personal data.
• Request correction of inaccurate data.
• Request deletion/erasure of personal data where applicable.
• Withdraw consent (including marketing consent) at any time.
• Object to certain processing or request restriction where lawful.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

You can exercise key rights from your account Privacy Settings (data export, consent update, erasure request) or by contacting us directly. Within the app: Settings → Privacy & Data → Export my data / Request data erasure, and Settings → Delete account.

We share data only when required for service delivery, compliance, or security. Third-party processors are engaged under contractual safeguards and only process data on documented instructions. Our processors include:

• Paystack — payment processing (subscriptions, credits).
• Firebase (Google) — push notifications.
• Sentry — crash and performance diagnostics.
• Brevo / SendGrid — transactional and (with consent) marketing email.
• Bunny.net / Cloudinary — image hosting and delivery for listings and profiles.
• Google, Apple, Facebook — social sign-in, if you choose it.

We also share information with other users as an inherent part of the service — your public profile, listings, and the messages you send to a trade partner are visible to the people you interact with. Do not include information in a listing, profile, or message that you are not comfortable sharing.

We may disclose data where required by law, to protect our rights or users' safety, or in connection with a corporate transaction.

Some processors above operate outside Nigeria. Where personal data is transferred internationally, we rely on appropriate safeguards and transfer mechanisms as required by the NDPA and applicable law.

We retain personal data only as long as required for the purposes in this Policy or as mandated by law. When you delete your account we remove or anonymise your personal data, except where we must retain limited records for legal, tax, fraud-prevention, or dispute-resolution purposes.

• Access control and authentication safeguards.
• Password hashing and transport security (encryption in transit).
• Operational monitoring and incident response procedures.
• Periodic review of data minimization and retention controls.

TradeByBartr is not directed to children under the age of digital consent in Nigeria. Our services are rated for a teen and older audience because they include user-generated content and messaging. We do not knowingly collect data from children below that age; contact us if you believe we have.

Where a personal data breach is likely to result in risk to individuals, we will notify NDPC and affected data subjects in line with applicable legal timelines and requirements.

Data Protection Desk: support@tradebybartr.com

NDPC Contact Portal: ndpc.gov.ng/contact

We may update this Policy from time to time. Material changes will be reflected with a new version date. See also our Terms & Conditions.

Our public website uses only strictly necessary storage by default. With your consent, we also use Google Analytics 4 to understand how visitors use the site (pages viewed, approximate location, device type). Google sets first-party cookies (for example _ga) that persist for up to 2 years, and Google may process this data on servers outside Nigeria under its own terms.

• Analytics is off until you choose “Accept” in the cookie notice; declining keeps it off and the site works exactly the same.
• You can change your choice at any time by clearing this site's storage in your browser, which shows the notice again.
• Analytics data is aggregated; we do not use it to identify you or to build advertising profiles.
• Form submissions (contact, newsletter, Untraded Audit) are sent only to our own servers and handled under the sections above.