Privacy Policy

Last updated: 27 July 2026

This policy explains how EKSU Marketplace processes personal information. Operator: EKSU Marketplace. Privacy contact: support@eksumarketplace.com. A business address and final data-protection contact will be published when finalized; no company identity or address is invented here.

1. Information we collect

  • Name, email, Nigerian phone number, password hash, role and account status.
  • Verification status, payment references and provider status—not plaintext card details.
  • Listings, Cloudinary-hosted images, tasks, applications, messages, ratings and reports.
  • Moderation history, security/device/IP logs, cookie preferences and password-reset request metadata.
  • We do not currently collect live location. Any future feature will require explicit consent.

2. How we receive information

Information comes directly from you, your use of the service, reports from other users, technical security logs, and providers such as Flutterwave, Cloudinary, hosting, databases and configured email delivery.

3. Why we use information

We process data for accounts, authentication, marketplace and task operation, messaging, verification payments, ratings, recovery, support, security, fraud prevention, moderation and legal compliance. Optional analytics would run only if later installed and consented to.

4. Lawful bases

Depending on the activity, processing may rely on contractual necessity, consent, legitimate interests in operating and securing the service, legal obligations, or protection of vital interests.

5. Service providers

  • Flutterwave processes verification payments and payment-card data on its systems.
  • Cloudinary stores and delivers listing images.
  • Hosting, database, backup and configured email providers support platform delivery.
  • Providers may process data outside Nigeria subject to required safeguards.

6. Messages and moderation

Messages are private between participants but are not represented as end-to-end encrypted. When a message is reported, authorized administrators may access limited context. Evidence access is restricted and audited.

7. Retention

We retain information only for as long as reasonably necessary for platform operation, security, dispute handling and legal obligations. This can include account data, content history, reports, moderation and payment records, short-lived reset tokens, logs and backups. A formal automated retention schedule remains a pre-launch operational requirement.

8. Your rights

Subject to Nigerian data-protection law, you may request access, correction, deletion where applicable, restriction, objection, consent withdrawal and portability where applicable. Some records may be retained for fraud, disputes or legal duties. You may complain to the Nigeria Data Protection Commission.

9. Security

Controls include password hashing, secure HttpOnly refresh cookies, role-based access, limited admin permissions and audit logs. Production must use HTTPS. No system can guarantee perfect security.

10. Children

The first version is for people aged 18 or older.

11. Future location and notifications

Live location and push notifications are not active. Future temporary location sharing would be limited to authorized task participants, stoppable, and retained no longer than necessary. Push permission would be requested separately, not inferred from cookie consent.

12. Changes and contact

Material changes will update the version and effective date and may require renewed acknowledgement. Contact us through the published support path.

Questions or complaints can be submitted through our Contact page.