Tradeet Privacy Policy
Last Updated: January 12, 2026 • Version: 1.0
1Introduction
Welcome to Tradeet (a product of Tradeet Technologies). We respect your privacy and are committed to protecting your personal data. This policy describes how we collect, use, and share your information when you use our mobile application, website, and WhatsApp-integrated storefronts.
2Information We Collect
We collect information from two types of users: Merchants (who create stores) and Customers (who shop at those stores).
A. For Merchants:
- Identity Data: Full name, business name, and government-issued ID (for verification).
- Contact Data: Phone number, email address, and physical business address.
- Financial Data: Bank account details and BVN (required for payouts and tax compliance).
- Transaction Data: Details about products sold, inventory levels, and revenue.
B. For Customers:
- Order Information: Name, delivery address, and phone number.
- Communication Data: Chat logs with the Tradeet Assistant or specific merchants.
- Payment Metadata: Confirmation of payment status (we do not store full credit card numbers; these are handled by our payment partners like Paystack/Flutterwave).
3How We Use Your Data (Legal Basis)
In accordance with the NDPA 2023, we process data based on the following:
- Contractual NecessityTo provide the storefront and order processing services you signed up for.
- Legitimate InterestTo improve our platform, prevent fraud, and use Gemini AI to suggest better products or generate business descriptions.
- Legal ObligationTo comply with Nigerian tax and anti-money laundering (AML) laws.
4Third-Party Data Sharing
We do not sell your data. We only share it with trusted partners to make Tradeet work:
To facilitate the WhatsApp Flows and chat interface.
To provide conversational search and AI-driven business tools.
To handle secure transactions.
To share delivery addresses with the courier of your choice.
5Data Retention
- Transaction Records: Retained for 7 years to comply with Nigerian financial regulations.
- Inactive Accounts: Data is deleted or anonymized after 24 months of total inactivity, unless otherwise requested by the user.
6Your Rights
Under the Nigeria Data Protection Act, you have the right to:
7Security Measures
We implement industry-standard security including:
- End-to-End Encryption: For all WhatsApp-based communications.
- Data Encryption: All sensitive information in our MongoDB database is encrypted at rest.
- Access Control: Multi-factor authentication (MFA) for merchant dashboards.
8Contact Us
If you have questions about this policy or want to exercise your rights, please contact our Data Protection Officer (DPO):