FooVsMarket ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what we collect, how we use it, and your rights under Nigerian law.

1. What We Collect

Account information: Name, email address, phone number, profile photo.

Listing content: Descriptions, photos, price, location you provide when posting ads.

Verification documents: Government-issued ID, selfie, CAC certificates — only when you voluntarily apply for seller verification. These are stored securely outside the public web directory.

Transaction data: Payment references, escrow transaction records.

Technical data: IP address, browser type, device fingerprint (for fraud prevention only), pages visited.

Communications: Messages sent through our platform, support ticket content.

2. How We Use Your Data

• To operate the marketplace and your account.
• To verify your identity when you apply for seller verification.
• To detect and prevent fraud and policy violations.
• To provide customer support.
• To send transactional notifications (listing status, payment alerts, support replies).
• To send marketing communications — only with your consent.
• To improve our services through aggregated, anonymised analytics.

3. Legal Basis (NDPA 2023)

We process your data under the following lawful bases:

• Contract performance: operating your account, processing transactions.
• Legitimate interests: fraud detection, platform security.
• Consent: marketing emails (you can withdraw at any time).
• Legal obligation: compliance with Nigerian law.

4. Data Sharing

We do not sell your personal data. We share limited data only where necessary:

• Payment processors: Paystack / Flutterwave — for payment processing.
• Email/SMS providers: for transactional messages.
• Law enforcement: when required by valid Nigerian legal process.

Verification documents are never shared with third parties outside of the verification process.

5. Data Retention

We retain your account data while your account is active. After deletion, we anonymise personal data within 30 days and retain anonymised transaction records for legal/audit purposes. Verification documents are deleted upon account deletion.

6. Your Rights (NDPA 2023)

You have the right to:

• Access — Download a copy of your data from Account Settings.
• Rectification — Update incorrect information from your profile settings.
• Erasure — Delete your account and data from Account Settings.
• Portability — Export your data in machine-readable format (JSON).
• Object — Opt out of marketing communications at any time.

7. Cookies

We use strictly necessary session cookies for login and CSRF protection. We do not use third-party tracking cookies without your consent.

8. Security

Verification documents are stored outside the web root, accessible only through authenticated admin routes. We use HTTPS, CSRF protection, and rate limiting to protect your data.

9. Children's Privacy

Our platform is not intended for persons under 18. If you believe a child has registered, please contact us and we will remove the account.

10. Changes to This Policy

We will notify registered users of material changes to this policy via email. Continued use after notification constitutes acceptance.

11. Contact Our Data Officer

For privacy concerns or to exercise your rights, open a support ticket or contact us. We respond within 72 hours as required by NDPA 2023.