🔒 Legal Document
Privacy Policy
How Campus Market collects, uses, and protects your personal information
📅 Effective: May 22, 2026
🔄 Updated: July 8, 2026
🌐 campusmarket.ng
01 Introduction
Welcome to Campus Market, Nigeria's student marketplace platform operated by Darexcode. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website at campusmarket.ng.
By creating an account or using Campus Market, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please do not use the platform.
This policy applies to all users of Campus Market — including buyers, vendors, and visitors — on both our website and Android application.
02 Information We Collect
We collect information you provide directly and information generated by your use of the platform:
- Account Information: Full name, email address, phone number, and password when you register.
- Profile Information: University/campus name, department, user role (buyer or vendor), and optional bio.
- Vendor Information: Business name, vendor type, WhatsApp contact number, product listings, and service listings.
- Payment Information: Transaction references and payment status processed via Paystack. We do not store card details — these are handled entirely by Paystack.
- Referral Data: Referral codes used during registration to track referral relationships between vendors.
- Usage Data: Pages visited, search queries, filters applied, and actions taken within the app.
- Device Information: Device type, operating system, app version, and browser type.
- Communications: Any messages or support requests you send us via email or WhatsApp.
03 How We Use Your Information
We use the information we collect for the following purposes:
- Create, verify, and manage your user account
- Connect buyers with vendors on campus
- Process vendor applications, approvals, and slot assignments
- Facilitate transactions and payment verification via Paystack
- Track referral relationships and calculate referral rewards
- Send transactional emails including email verification, password resets, and account notifications
- Display vendor products and services in the marketplace
- Improve, personalise, and optimise the platform experience
- Monitor for fraud, abuse, or violations of our Terms of Service
- Respond to customer support requests
- Comply with applicable legal obligations
04 How We Share Your Information
We do not sell, rent, or trade your personal information to any third party for marketing purposes.
We may share your information only in these limited circumstances:
- With other users: Vendor business names, product listings, campus locations, and WhatsApp contact numbers are visible to buyers to enable transactions. Your email address is never shown publicly.
- With Supabase: Our database and authentication provider. They store and process user data on our behalf under strict data processing agreements.
- With Paystack: Our payment processor. When you make a payment, relevant transaction details are shared with Paystack to complete the transaction securely.
- For legal compliance: If required by Nigerian law, court order, or government authority, or to protect the safety and rights of our users.
- Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction.
05 Data Storage & Security
Your data is stored securely using Supabase, which provides encrypted storage, Row Level Security (RLS), and industry-standard authentication protocols. All data transmitted between your device and our servers is encrypted using HTTPS/TLS.
We implement appropriate technical and organisational security measures including:
- Encrypted passwords (never stored in plain text)
- Email verification required before account access
- Secure token-based authentication (JWT)
- Database-level access control policies
- Payment processing handled entirely by PCI-DSS compliant Paystack
Despite these measures, no method of data transmission over the internet is 100% secure. We encourage you to use a strong, unique password and to keep your account credentials private.
06 Your Rights
As a user of Campus Market, you have the following rights over your personal data:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your account and all associated personal data.
- Withdrawal of consent: Stop using the platform and request account deletion at any time.
- Data portability: Request your data in a portable format where technically feasible.
- Objection: Object to specific types of processing of your personal data.
To exercise any of these rights, contact us at darex.pages@gmail.com. We will respond to your request within 30 days.
07 Children's Privacy
Campus Market is intended exclusively for university students aged 16 and above. We do not knowingly collect personal information from individuals under the age of 16.
If we become aware that a person under 16 has provided us with personal information, we will take immediate steps to delete that information from our systems. If you believe we have inadvertently collected data from a minor, please contact us immediately at darex.pages@gmail.com.
08 Third-Party Services
Campus Market integrates with the following third-party services, each with their own privacy practices:
- Supabase — Database, authentication, and file storage. View Supabase Privacy Policy
- Paystack — Payment processing for vendor subscriptions. View Paystack Privacy Policy
- WhatsApp — Used for buyer-to-vendor communication. Clicking "Order on WhatsApp" opens WhatsApp and is subject to Meta's privacy policies.
We are not responsible for the privacy practices of these third-party services. We encourage you to review their policies before using them.
09 Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:
- Active accounts: Data is retained for the duration of your account's existence.
- Deleted accounts: We will delete or anonymise your personal data within 30 days of a verified deletion request.
- Payment records: Transaction records may be retained for up to 7 years for legal and financial compliance purposes.
- Backups: Data may persist in encrypted backups for up to 90 days after deletion.
10 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify registered users via email where required
Your continued use of Campus Market after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.
11 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to us:
We aim to respond to all privacy-related inquiries within 5 business days.