Privacy Policy

1. Scope

This policy explains how Plugg handles personal data under the Nigeria Data Protection Act 2023. Plugg is the data controller for data you give us in the app.

2. What we collect

Account data: name, username, email and a securely hashed password. If you sign in with Google we receive your name and verified email.

Verification data: full name, ID type, the last four digits of your NIN or BVN, phone number, address and state. We do not store your full ID number.

Marketplace data: listings, photos, deal room messages, orders, reviews, wallet transactions and bank details for withdrawals.

Technical data: IP address and device information used for security and rate limiting.

3. How we use it

To run your account, hold payments in escrow, arrange delivery, pay sellers and agents, resolve disputes, prevent fraud and meet legal duties. We do not sell your data.

4. Who we share it with

Paystack to process payments and payouts, our logistics partners to deliver and inspect goods, our email provider to send account emails, and our hosting and database providers. Each processes data only on our instructions.

We may share data with authorities when the law requires it.

5. Privacy in deal rooms

Phone numbers and emails typed into deal chat are hidden automatically so parties cannot take deals off Plugg.

6. Security

Passwords are hashed with bcrypt, sessions are signed and HTTP only, traffic is encrypted, and staff access is logged in an audit trail.

7. Retention

We keep account and transaction records while your account is open and for up to six years after, as required for financial records. You can ask us to delete other data sooner.

8. Your rights

You can ask to access, correct, delete or export your data, or object to processing, by emailing support@plugg.ng. You can also complain to the Nigeria Data Protection Commission.

9. Cookies

We use one essential cookie to keep you signed in. We do not use advertising cookies.