Privacy Policy
Effective date: 20 May 2025 · Applies to all CampSwap users
Contents
1. Who We Are
CampSwap is a peer-to-peer campus marketplace that allows Nigerian university students to buy, sell, and swap goods and services within their campus communities. References to "CampSwap", "we", "us", or "our" in this policy refer to the platform operator.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services. By creating an account or using CampSwap, you agree to the practices described here.
2. Data We Collect
Information you provide directly:
- Full name and email address (used for your account and communications)
- National Identification Number (NIN) — collected for identity verification only
- University name and academic status
- Bank account details (account number and bank name) — used to receive Paystack payouts
- Profile photo (optional)
- Listing content: titles, descriptions, prices, and product images
- Messages sent through our in-app chat
Information collected automatically:
- IP address and approximate location (city-level, for fraud prevention)
- Device type, browser, and operating system
- Pages visited and actions taken on the platform (e.g., items viewed, searches)
- Session timestamps and referral sources
We do not collect:
- Your BVN (Bank Verification Number)
- Full card numbers or CVV codes — all payment data goes directly to Paystack
- Precise GPS location
3. How We Use Your Data
We use your information solely to provide and improve CampSwap:
- Create and manage your account
- Verify your identity and student status via NIN
- Process payments and escrow transactions through Paystack
- Display your listings to other users
- Facilitate buyer-seller communication via our chat system
- Detect and prevent fraud, scams, and policy violations
- Send transactional emails (order updates, dispute notices, payment confirmations)
- Comply with applicable Nigerian law
We do not use your data for advertising profiling, sell it to third parties, or share it for any purpose outside of running CampSwap.
4. Third-Party Services
We rely on the following trusted providers. Each has its own privacy policy:
Paystack
Payment processing, escrow, and seller payouts. Your bank details are shared with Paystack to initiate transfers.
Supabase
Database and authentication infrastructure. Your account data is stored on Supabase-managed servers.
Vercel
Web hosting and CDN. Serves the CampSwap website globally.
We do not share your data with any other third parties, including advertisers, analytics companies, or data brokers.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:
- Active account data is retained indefinitely while your account is open
- After account deletion, we remove your profile, listings, and messages within 30 days
- NIN verification records are deleted within 14 days of verification completion
- Transaction records (orders, escrow history) are retained for 7 years to comply with Nigerian financial regulations
- Chat messages are deleted 90 days after the associated order is closed
6. Your Rights (NDPR)
Under the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act 2023, you have the following rights:
- Right to access: request a copy of the personal data we hold about you
- Right to rectification: correct inaccurate or incomplete data
- Right to erasure: request deletion of your data (subject to legal retention requirements)
- Right to restriction: ask us to limit how we process your data
- Right to data portability: receive your data in a machine-readable format
- Right to object: object to processing based on our legitimate interests
To exercise any of these rights, email us at privacy@campswap.ng. We will respond within 30 days.
8. Children's Privacy
CampSwap is intended for university students aged 18 and above. We do not knowingly collect personal information from anyone under 18. If we become aware that a minor has created an account, we will delete the account and associated data promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and display a notice on the platform at least 14 days before the change takes effect. Continued use of CampSwap after the effective date constitutes acceptance of the updated policy.
10. Contact Us
If you have questions, concerns, or requests related to your privacy, contact us: