Privacy Policy

We collect only the data needed to operate the marketplace: account information (name, email, phone), KYC documents (government ID, selfie), payment metadata, order and delivery details, and in-app messages.

We do not collect data you do not provide. We do not track your activity outside of the BANA platform.

Your data is used to operate and improve the marketplace, process payments, prevent fraud, comply with legal obligations, and send you transactional notifications.

We may send promotional messages only if you have opted in. You can withdraw consent at any time from Settings → Notifications.

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). KYC documents are stored on segregated, access-controlled infrastructure with a strict need-to-know policy.

We undergo annual third-party security audits. In the event of a breach that affects your personal data, we will notify you within 72 hours.

We never sell your personal data. We share payment metadata with our processors (MTN MoMo, Paystack) only as required to complete transactions.

We share your delivery address with the relevant seller solely to fulfil your order. We may share anonymised, aggregated analytics with partners.

We may disclose data to law enforcement when required by a valid legal order.

You may request a full export of your personal data at any time from Settings → Data & Privacy → Download my data.

You may request deletion of your account and data from Settings → Data & Privacy → Delete account. We retain transaction records for 7 years as required by Nigerian financial regulations.

To raise a data protection concern, email privacy@bana.app.