Legal · Privacy

Privacy Policy

Effective date: 20 May 2025  ·  Applies to all CampSwap users

Plain-English summary: We collect only what we need to run a safe campus marketplace. We don't sell your data. We share it only with the payment and infrastructure providers that power CampSwap. You can request deletion of your account at any time.

Contents

1. Who We Are
2. Data We Collect
3. How We Use Your Data
4. Third-Party Services
5. Data Retention
6. Your Rights (NDPR)
7. Cookies & Tracking
8. Children's Privacy
9. Changes to This Policy
10. Contact Us

1. Who We Are

CampSwap is a peer-to-peer campus marketplace that allows Nigerian university students to buy, sell, and swap goods and services within their campus communities. References to "CampSwap", "we", "us", or "our" in this policy refer to the platform operator.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services. By creating an account or using CampSwap, you agree to the practices described here.

2. Data We Collect

Information you provide directly:

  • Full name and email address (used for your account and communications)
  • National Identification Number (NIN) — collected for identity verification only
  • University name and academic status
  • Bank account details (account number and bank name) — used to receive Paystack payouts
  • Profile photo (optional)
  • Listing content: titles, descriptions, prices, and product images
  • Messages sent through our in-app chat

Information collected automatically:

  • IP address and approximate location (city-level, for fraud prevention)
  • Device type, browser, and operating system
  • Pages visited and actions taken on the platform (e.g., items viewed, searches)
  • Session timestamps and referral sources

We do not collect:

  • Your BVN (Bank Verification Number)
  • Full card numbers or CVV codes — all payment data goes directly to Paystack
  • Precise GPS location

3. How We Use Your Data

We use your information solely to provide and improve CampSwap:

  • Create and manage your account
  • Verify your identity and student status via NIN
  • Process payments and escrow transactions through Paystack
  • Display your listings to other users
  • Facilitate buyer-seller communication via our chat system
  • Detect and prevent fraud, scams, and policy violations
  • Send transactional emails (order updates, dispute notices, payment confirmations)
  • Comply with applicable Nigerian law

We do not use your data for advertising profiling, sell it to third parties, or share it for any purpose outside of running CampSwap.

4. Third-Party Services

We rely on the following trusted providers. Each has its own privacy policy:

Paystack

Payment processing, escrow, and seller payouts. Your bank details are shared with Paystack to initiate transfers.

Supabase

Database and authentication infrastructure. Your account data is stored on Supabase-managed servers.

Vercel

Web hosting and CDN. Serves the CampSwap website globally.

We do not share your data with any other third parties, including advertisers, analytics companies, or data brokers.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

  • Active account data is retained indefinitely while your account is open
  • After account deletion, we remove your profile, listings, and messages within 30 days
  • NIN verification records are deleted within 14 days of verification completion
  • Transaction records (orders, escrow history) are retained for 7 years to comply with Nigerian financial regulations
  • Chat messages are deleted 90 days after the associated order is closed

6. Your Rights (NDPR)

Under the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act 2023, you have the following rights:

  • Right to access: request a copy of the personal data we hold about you
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure: request deletion of your data (subject to legal retention requirements)
  • Right to restriction: ask us to limit how we process your data
  • Right to data portability: receive your data in a machine-readable format
  • Right to object: object to processing based on our legitimate interests

To exercise any of these rights, email us at privacy@campswap.ng. We will respond within 30 days.

7. Cookies & Tracking

CampSwap uses essential cookies only — specifically session cookies required for authentication and security. We do not use advertising cookies, third-party tracking pixels, or analytics services that fingerprint individual users.

You can disable cookies in your browser settings, but doing so will prevent you from logging in to your account.

8. Children's Privacy

CampSwap is intended for university students aged 18 and above. We do not knowingly collect personal information from anyone under 18. If we become aware that a minor has created an account, we will delete the account and associated data promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and display a notice on the platform at least 14 days before the change takes effect. Continued use of CampSwap after the effective date constitutes acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests related to your privacy, contact us:

CampSwap Data Privacy

Email: privacy@campswap.ng

Response time: within 30 days

← HomeTerms of Use© 2026 CampSwap