Privacy Policy

1. Who We Are

Nodaar ("we," "us," or "our") is a mobile commerce platform designed to connect Nigerian suppliers and resellers. The Nodaar app is available on Android and enables users to list products, manage orders, and conduct business transactions within Nigeria.

This Privacy Policy applies to all users of the Nodaar mobile application, our website at nodaar.com.ng, and any related services we provide.

2. Information We Collect

We collect information you provide directly to us, as well as information generated through your use of the app.

Information You Provide:

• Account Information: Full name, email address, phone number, and password (stored securely using bcrypt hashing — we cannot read your password)
• Business Profile: Business name, category, description, and logo/images (for Suppliers and Resellers)
• Product Listings: Product names, descriptions, prices, photos, and stock quantities (Suppliers only)
• Banking Information: Bank account number and bank name for withdrawal processing. Card details are handled exclusively by Paystack — we never store card numbers.
• Order Details: Products ordered, quantities, amounts, and transaction history

Information Collected Automatically:

• Device type, Android OS version, and app version
• App usage patterns (screens visited, features used)
• Push notification token (to send you order updates)
• IP address and approximate location (city-level only, no precise GPS)

3. How We Use Your Information

We use the information we collect to:

• Create and manage your Nodaar account
• Enable you to buy, sell, and manage products and orders on our marketplace
• Process payments and transfer earnings to your Nigerian bank account
• Send you order updates, payment confirmations, and account notifications
• Display your store and products to other users on the marketplace
• Provide customer support and respond to your inquiries
• Improve the app by analyzing usage patterns and feedback
• Detect and prevent fraud and abuse on the platform
• Comply with applicable Nigerian laws and financial regulations
• Send you promotional updates about Nodaar (you can opt out at any time)

4. How We Share Your Information

We do not sell your personal information to any third party. We may share information only in the following limited circumstances:

• With Other Nodaar Users: Your business name, store profile, and product listings are visible to other users as part of the marketplace.
• Payment Processors (Paystack): We share necessary payment data with Paystack to process transactions. Paystack is PCI-compliant and operates under their own privacy policy.
• Cloud Infrastructure (Supabase): Your data is stored on Supabase servers. Supabase processes data as our data processor under our instructions and security policies.
• Legal Requirements: We may disclose your information if required by Nigerian law, court order, or legitimate government authority.
• Business Transfers: If Nodaar is acquired or merges with another entity, your data may be transferred with prior written notice to you.

5. Data Storage & Security

Your data is stored on secure cloud servers (Supabase, hosted on AWS infrastructure). We implement the following security measures:

• All data is encrypted in transit using TLS/HTTPS
• Passwords are hashed using bcrypt — they cannot be reversed or read
• Row-Level Security (RLS) policies ensure users can only access their own data
• Payment API secrets are stored in secure environment variables, never in the app code
• Regular access control audits and least-privilege database policies

While we take all reasonable steps to protect your information, no internet transmission is 100% secure. We encourage you to use a strong, unique password for your account.

6. Your Rights & Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information through the app's Profile settings
• Deletion: Request full deletion of your account and all associated personal data. We process these requests within 30 days.
• Notification Control: Turn off push notifications at any time in the app's Settings screen
• Marketing Opt-out: Unsubscribe from promotional messages by contacting us or using the unsubscribe link in emails
• Data Portability: Request your data in a machine-readable format (JSON or CSV)

To exercise any of these rights, contact us at nodaarltd@gmail.com.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services:

• Account & Profile Data: Retained until you request deletion
• Transaction & Financial Records: Retained for 7 years for legal and financial compliance
• Inactive Accounts: Accounts with no activity for 24 months may be scheduled for deletion, with 30 days' prior email notice

When you delete your account, your profile, store, and product listings are removed. Financial transaction records are retained as required by applicable law.

8. Children's Privacy

Nodaar is intended for use by persons aged 18 and older. We do not knowingly collect personal information from children under 18. If we discover that a user under 18 has created an account, we will promptly delete their data.

If you believe a child under 18 has used Nodaar, please contact us immediately at nodaarltd@gmail.com.

9. Third-Party Services

Nodaar uses the following third-party services. Each operates under its own privacy policy:

• Paystack — Payment processing (paystack.com)
• Supabase — Database, authentication, and cloud storage (supabase.com)
• Firebase Cloud Messaging (Google) — Push notification delivery

We encourage you to review the privacy policies of these services to understand how they handle your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by:

• Displaying a notice inside the Nodaar app
• Sending an email to your registered address
• Updating the "Last Updated" date at the top of this page

Your continued use of the Nodaar app after changes are published constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please contact us:

Email: nodaarltd@gmail.com
WhatsApp: +234 703 495 6393
Website: nodaar.com.ng

We aim to respond to all privacy requests within 7 business days.