Privacy Policy

1. Introduction

This Privacy Policy explains how ChiperHub Ltd ("ChiperHub", "we", "us") collects, uses, shares and protects your personal information when you use the ChiperHub website, Store and Marketplace (the "Platform"). It should be read together with our Terms of Service.

2. Information We Collect

Information you give us

Account details: your name, email address, phone number (optional), date of birth, and gender, provided when you register. You may also set a username / display handle. Your password is stored only as a one-way hash — we never store or see it in plain text.
Seller payout details: if you sell on the Marketplace, your bank name, account number and account name, which you must add before listing.
Listings and media: the title, description, category, condition, asking price, an optional per-listing contact phone number, the location you type for the item, and the photos and optional video you upload.
Transaction information: Marketplace purchases and sales (amounts, statuses, timestamps), any reason and bank details you submit with a refund request, Store orders (items, quantities and prices at checkout), reviews you leave (a 1–5 rating and an optional comment), and any message you send when responding to a Wanted Offer.
Communications: messages you send to our support team, and your responses to prompts on the Platform.

Information collected automatically

Usage data: basic information about how you use the Platform, and standard web-server logs.
Marketplace listing views: we count listing views in aggregate. To avoid counting the same visitor repeatedly, we briefly store a one-way hashed value derived from your session identifier or, if you have none, your IP address, for up to about 24 hours. We do not keep your raw IP address for this purpose, and these short-lived records are automatically deleted.
Verification and account status: whether your email is verified, whether you are an activated seller and whether that seller profile is marked verified, and whether your account is active or suspended.
Device storage: see Cookies & Local Storage below.

We do not run third-party advertising or web-analytics trackers, we do not use social-media login, and we do not process card or bank payments ourselves.

3. How We Use Your Information

Create and manage your account and log you in securely.
Facilitate and administer Marketplace transactions and escrow, including connecting buyers and sellers for inspection and paying sellers to their registered bank account.
Operate the Store order and staff fulfilment process.
Prevent, detect and investigate fraud, abuse and policy violations, enforce our Terms, and keep the Platform secure.
Send you service messages — for example email for address verification, password resets and transaction updates, and in-app notifications.
Generate internal operational alerts to ChiperHub staff about Platform activity (for example a new order or a claimed payment) so we can act on it quickly. These staff alerts can include a buyer's or seller's name and phone number.
Understand how the Platform is used so we can fix problems and improve it.
Comply with our legal, tax and accounting obligations.

4. Cookies & Local Storage

Session cookie: we set one cookie that keeps you logged in and protects your session. It is marked HttpOnly and SameSite, and Secure when the site is served over HTTPS. Without it, you cannot stay signed in.
Local storage (kept in your browser, never sent to us): whether you have installed ChiperHub as an app, whether you have muted the notification sound, and a marker for the most recent notification you have seen (so we don't chime for the same one twice).
Session storage (cleared when you close the tab): a flag noting that the "Open WhatsApp" step of a Store checkout has already run, so it isn't triggered again on a page refresh.

We do not use tracking or advertising cookies.

With other users, to complete a transaction: when you buy or sell, we share the information needed to complete the deal — for example connecting a buyer and seller for inspection and handover, showing a seller's public store name and rating, and displaying a review under the reviewer's handle.
Web fonts (Bunny Fonts, fonts.bunny.net): our pages load fonts from Bunny Fonts, a privacy-focused font service. Your browser requests the font files directly from that service, which therefore receives your IP address and standard request headers. Bunny Fonts states that it does not log this data for tracking purposes.
Service providers: outbound email is delivered through a third-party email provider engaged by ChiperHub; the website and databases run on infrastructure from a third-party hosting provider; staff operational alerts may be delivered through a push-notification relay service. We share with each provider only what it needs to perform its function and require it to protect the information.
WhatsApp: Store checkout and support use WhatsApp. When you continue to WhatsApp, your messages and phone number are handled by WhatsApp / Meta under their own terms and privacy policy, which we do not control.
Legal and safety: we may disclose information where required by law, to respond to lawful requests, or to protect the rights, property or safety of ChiperHub, our users, or the public.
Business transfers: if ChiperHub is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction.

We do not sell your personal information.

6. Data Retention

We keep personal information only as long as we need it for the purposes above, then delete or anonymise it. In general:

Data	Kept for
Account profile details	While your account is open; deleted or anonymised after a verified deletion request (see below).
Seller payout bank details	While you have an active seller account; removed when the account is deleted.
Transaction, escrow, Store order and payout records	Up to about 6 years after the transaction, for tax, accounting, dispute-resolution and fraud-prevention purposes — even after an account is closed.
Reviews	May remain visible after account closure, shown against your handle or anonymised.
Listing-view de-duplication hashes	About 24 hours, then automatically deleted.
Email and server logs	A short rolling period for troubleshooting and security.

7. Your Rights (NDPR)

ChiperHub operates in Nigeria, and we aim to handle personal data consistently with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act. Subject to applicable law, you may ask us to:

confirm what personal data we hold about you and get a copy of it;
correct information that is inaccurate or out of date;
delete your personal data (see Account Deletion);
restrict or object to certain processing; and
withdraw any consent you have given, without affecting processing already carried out.

You also have the right to lodge a complaint with the Nigeria Data Protection Commission.

The precise scope of these rights, our lawful bases for processing, and any statutory response deadlines are subject to confirmation by legal counsel. This section is a good-faith summary and not legal advice.

8. Account Deletion

You can ask us to close your account and delete your personal data by emailing hello@chiperhub.com or contacting the ChiperHub support team on WhatsApp via the link in the site footer. We will verify that the request comes from you, and then delete or anonymise your personal data within 30 days. We may retain a limited set of records where the law requires it or where we need them to resolve disputes, prevent fraud, or meet tax and accounting obligations, as described in Data Retention. Open transactions must be completed or cancelled before an account can be deleted.

9. Security

Passwords are stored using one-way hashing; we cannot read them.
Login sessions use a cookie marked HttpOnly and SameSite, and Secure when the site is served over HTTPS.
Forms that change data are protected against cross-site request forgery, and new accounts must verify their email address before use.
Seller payout bank details are stored securely and used only to pay you for completed sales.
Access to personal data within ChiperHub is limited to staff who need it for the purposes described in this Policy.
We recommend that you always access ChiperHub over a secure (HTTPS) connection and keep your password confidential.

No method of transmitting or storing data is completely secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security.

10. Children's Privacy

The Platform is intended only for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will remove it.

11. Changes to This Policy

We may update this Policy from time to time. We will change the "Last updated" date at the top of this page and, for significant changes, give notice through the Platform (for example an in-app notification or a notice on the site). Your continued use of the Platform after an update means you accept the revised Policy.

12. Contact

For privacy questions or to make a data request, contact us at hello@chiperhub.com, or reach the ChiperHub support team on WhatsApp via the link in the site footer.

ChiperHub Ltd. Last updated September 2, 2026.