1. Introduction & Our Commitment

At Campally, we believe student trading should be fast, convenient, and safe. We respect your personal privacy and comply with the Nigeria Data Protection Act (NDPA) and applicable privacy regulations.

This Privacy Policy explains what information we collect, why we collect it, how your Student ID verification is safeguarded, and how payments via Paystack are processed securely.

2. Information We Collect

When you register and use Campally, we collect only information necessary to operate a student marketplace:

• Account Information: Your full name, email address, password (stored in salted, hashed format), and profile avatar.
• Campus & Accommodation Details: Your designated Nigerian university campus (e.g. AE-FUNAI, UNILAG, UNN, University of Ibadan) and hostel or lodge name. This data is used solely to display local deals and filter items nearby.
• Contact Information: Your active WhatsApp phone number, which enables buyers and sellers to connect directly for peer-to-peer campus meetups.
• Marketplace Content: Listing titles, descriptions, course codes (e.g. MTH101), prices, swap preferences, and photos you upload.
• Student Requests: Requests posted on the Wanted Board including item title, course, budget, and contact number.

3. Student ID Verification & Document Security

To protect our student community from scammers and impersonators, Campally provides optional Student ID Verification:

• Verification Data: Matriculation number, institutional student email, and photos of your student identity card.
• Strict Confidentiality: Your student ID cards and matric numbers are stored in secure, private cloud buckets. They are NEVER made public, sold, or shared with third parties.
• Purpose: Used exclusively by authorized Campally administrators to verify student status and award the Verified Student badge.

4. Payment Information & Paystack Processing

Campally offers optional student monetization features: Listing Boosts (₦300 / ₦500), Urgent Sale Tags (₦200), Pro Verified Seller Badges (₦500), and Campus Business Spotlights (₦1,500).

• PCI-DSS Certified Gateway: All financial transactions are processed securely through Paystack, a licensed and PCI-DSS Level 1 compliant payment processor.
• Zero Card Data on Campally: Campally servers NEVER process, handle, or store debit card numbers, PIN numbers, or CVVs. Payments occur in Paystack's encrypted environment.
• Cryptographic Verification: All payment confirmations are verified through server-to-server authenticated API calls using Paystack Secret Keys that never leave our backend.
• Transaction Records: We retain only transaction references, amounts paid in Naira, timestamps, and activated plan IDs for receipt generation and customer service.

5. How We Use Your Information

We use the data collected strictly to:

• Provide, maintain, and optimize the Campally marketplace for your campus.
• Display active listings, student requests, and seller profiles to relevant students.
• Suggest safe campus meetup spots based on seller preferences.
• Prevent fraud, investigate malicious listings, and protect students from scams.
• Process applications for the Campus Ambassador program.

6. We Do Not Sell Your Data

Campally does not sell, rent, or trade your personal information to third-party advertisers or data brokers.

We only share data with service providers essential to running the app:

• Supabase: For secure database management and encrypted cloud storage.
• Paystack: For processing student promotion payments securely.

7. Your Rights & Account Control

You maintain full control over your personal data:

• Edit or Remove Listings: You can edit or delete any listing at any time from the "My Listings" screen.
• Account Deletion: If you wish to delete your account, remove your profile, or delete submitted verification documents, simply email support at mbuharmless@gmail.com with your registered email, and our team will erase your data within 48 hours.

Questions Regarding Your Privacy?

For privacy inquiries, report of fraudulent accounts, or data requests, contact our privacy officer directly.