Privacy Policy

1. Who we are

PayWithGuddy operates this multi-seller marketplace. This policy explains what we collect, why we collect it, and how we protect it when you browse, buy, sell, or contact support.

2. Information we collect

We collect what we need to run a secure marketplace and protect order settlements:

• Account data - Full name, email, phone, and a hashed login password. Optional two-factor authentication secrets if you enable 2FA.
• Seller data - Store name, slug, bio, logo, payout bank details (resolved via Paystack), and identity verification data: the NIN (stored encrypted; only the last 4 digits are readable), the name, date of birth and phone returned by the NIN check, and the ID photo and selfie, which only our verification team can open. Photos from rejected submissions are deleted once a seller is approved. Buyers are never asked for identity documents.
• Order & delivery data - Doorstep address, delivery notes, WhatsApp number, line items, delivery PIN, payment references, and whether you chose delivery or pickup from the seller.
• Dispute evidence - Descriptions and files you upload when reporting an issue.
• Device & security telemetry - IP address, browser user-agent, and security-related request metadata (for fraud prevention and rate limiting).
• Support messages - Content you send through contact forms or support tickets.

3. How we use your information

• Processing orders, held payments, seller payouts, and buyer refunds.
• Confirming payments, sending transactional email, and showing your delivery PIN on Track Order.
• Sending one back-in-stock email when you ask to be told about a sold-out item. We delete your email from that list as soon as the alert is sent, or after 180 days.
• Preventing fraud, account takeovers, and abuse of checkout or disputes.
• Prefilling checkout from a saved address when you are signed in.
• Responding to support requests and resolving marketplace disputes.

4. Payments

Buyers pay by bank transfer into a one-time account provided by our payment partner (Paystack). We store payment references, amounts, and status - never your bank login or card details. Refunds are only sent to a bank account the buyer confirms in their own name.

5. Cookies and local storage

We use cookies and similar storage for session sign-in, cart contents, security (for example CSRF / bot checks when enabled), and basic preference such as theme. You can clear cookies in your browser; doing so may sign you out or empty a guest cart.

6. Security

• Passwords - Stored with one-way cryptographic hashing (PBKDF2). They cannot be decrypted back to the original value.
• In transit - Where HTTPS is enabled, traffic between your browser and our servers uses TLS.
• Access - Staff access to customer data is limited to operations that need it (orders, support, fraud review).

7. Sharing

We do not sell, rent, or trade your personal information. Data is shared only with payment, logistics, email, and messaging partners needed to complete your order, notify you, or protect the service - and when required by law.

8. Retention and your choices

We keep order and account records as long as needed for fulfilment, accounting, dispute handling, and legal obligations. You may update your profile, delivery address, password, and 2FA from your account. You may request account closure or a copy of your data by contacting us; we may retain limited records required by law or to prevent fraud.

Under Nigeria's data-protection rules you may also ask us to correct inaccurate personal data we hold about you.

9. Contact

Privacy questions: [email protected]. See also our Terms and Conditions and Contact page.