VaultMart is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights regarding it. By using VaultMart, you agree to this policy.

1. What information we collect

When you create an account, we collect your name, email address, phone number, and chosen password. Vendors additionally provide their NIN (National Identification Number) and BVN (Bank Verification Number) for identity verification, and bank account details for payouts. When you make a purchase, we collect delivery addresses and payment references. We do not store card numbers - all card payments are processed directly by Paystack.

2. How we use your information

We use your information to operate the VaultMart marketplace, process escrow payments, verify vendor identities, send order notifications, and resolve disputes. NIN and BVN data is used solely for KYC (Know Your Customer) compliance and fraud prevention - it is encrypted at rest and never shared with other users or third parties except for identity verification purposes.

3. Escrow and payments

All transactions on VaultMart are processed through Paystack, a licensed payment service provider in Nigeria. When you pay for an order, your funds are held in a VaultMart escrow account until you confirm delivery. We retain transaction records for a minimum of 7 years as required by Nigerian financial regulations.

4. How we share your information

We share limited information with vendors you transact with (such as your delivery address for shipping) and with buyers if you are a vendor (your store name and city). We do not sell your personal data to advertisers or third parties. We may share data with law enforcement if required by Nigerian law or a valid court order.

5. Data security

Your data is stored on Supabase-hosted PostgreSQL databases with row-level security policies. All data in transit is encrypted via TLS 1.2 or higher. Sensitive fields including NIN, BVN, and bank account numbers are stored encrypted. Passwords are hashed using bcrypt and are never stored in plaintext.

6. Your rights

You have the right to access, correct, or delete your personal data at any time. To request data export or deletion, contact support@vaultmart.ng. Note that some data may be retained for legal compliance even after account deletion, particularly transaction records.

7. Cookies

VaultMart uses essential session cookies to keep you logged in. We do not use tracking or advertising cookies. We do not use Google Analytics or any third-party analytics service.

8. Changes to this policy

We may update this policy occasionally. We will notify you of significant changes via email and in-app notification. Continued use of VaultMart after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related enquiries, contact our data protection officer at privacy@vaultmart.ng or write to: VaultMart Nigeria Limited, Lagos, Nigeria.