Privacy Policy

1. Introduction

SwiftCart ("we", "us", "our") operates a local commerce and delivery marketplace platform accessible via mobile applications and our website at swiftcartapp.co. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our platform as a customer, vendor, or delivery rider.

By creating an account or using SwiftCart, you agree to the terms of this Privacy Policy. If you do not agree, you must discontinue use of our services.

2. Who We Are

SwiftCart is a technology company registered in Nigeria. We connect customers with local vendors and delivery riders operating in Nigerian communities. We are not a bank, financial institution, or payment processor. All payment processing is handled by Paystack, a licensed payment service provider in Nigeria.

3. What Data We Collect

A. Information You Provide Directly

For All Users (Customers, Vendors, Riders):

• Full name
• Phone number
• Email address
• Profile photograph
• Account password (stored encrypted)

For Customers:

• Delivery addresses (home, work, and saved locations)
• Order history and preferences
• Payment method tokens (we do not store raw card numbers — these are handled by Paystack)
• Support messages and dispute communications

For Vendors:

• Business name and description
• Physical store address and location coordinates
• Store operating hours
• Product listings (names, descriptions, prices, photographs)
• Bank account details (for earnings payouts via Paystack)
• Business registration number (if applicable)
• Government-issued ID of account owner

For Riders:

• Full legal name
• Government-issued ID (NIN or Passport)
• National Identity Number (NIN) — verified via NIMC
• Bank Verification Number (BVN) — where applicable for payout verification
• Rider photograph
• Motorcycle registration and plate number
• Next-of-kin name and phone number
• Guarantor information (name, phone, address)
• Bank account details (for earnings payouts via Paystack)

B. Information Collected Automatically

• Device type, model, and operating system
• App version
• IP address
• Crash reports and error logs
• Session activity and navigation patterns
• Push notification interaction data

C. Location Data

Customers: We collect location data when you place an order, to determine your delivery address and calculate delivery estimates. We request location permission only when needed.

Riders: We collect real-time GPS location data when a rider is active on a delivery. This data is used to:

• Show customers estimated delivery arrival
• Verify delivery completion
• Resolve delivery disputes
• Monitor platform safety

Rider location is only shared with the customer assigned to their active delivery. It is not shared with other customers or publicly accessible.

Vendors: We collect your store's physical location to display it on the SwiftCart customer map and for delivery routing calculations.

D. Payment Data

SwiftCart does not store your raw payment card details. Payments are processed by Paystack (paystack.com), a licensed payment processor. We store:

• Transaction reference numbers
• Payment status (successful, failed, refunded)
• Order amounts
• Earnings records for vendors and riders

For payout processing, we store bank account numbers and account names provided by vendors and riders, which are used exclusively for earnings disbursements through Paystack.

4. Why We Collect This Data

5. How We Share Your Data

We do not sell your personal data. We share data only in these circumstances:

A. Service Delivery

• Customer delivery address and name are shared with the assigned rider during an active delivery only.
• Customer first name and order summary are shared with the vendor for order preparation.
• Rider name and photo are shared with customers during active deliveries.

B. Payment Processing

Paystack receives necessary payment and payout information to process transactions.

C. Legal Requirements

We may disclose data if required by Nigerian law, court order, or regulatory directive.

D. Fraud Prevention

We may share data with fraud detection partners or law enforcement when there is reasonable suspicion of fraud, theft, or criminal activity.

E. Business Transfers

In the event of a merger, acquisition, or sale of company assets, your data may be transferred as part of that transaction, subject to this Privacy Policy.

6. Data Retention

7. Your Rights

You have the right to:

• Access your personal data we hold
• Request correction of inaccurate data
• Request deletion of your account and associated data (subject to retention obligations)
• Withdraw consent for marketing communications
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

8. Data Security

We implement industry-standard security measures including:

• TLS encryption for all data in transit
• Encrypted storage of sensitive fields at the database level
• Row-Level Security (RLS) enforced at the database layer
• Role-based access control — staff see only what their role permits
• Regular security reviews

No system is 100% secure. In the event of a data breach affecting your rights, we will notify you in accordance with the Nigeria Data Protection Act 2023.

9. Children's Privacy

SwiftCart is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has registered, contact us immediately at support@swiftcartapp.co.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be notified via the app or email at least 7 days before they take effect. Continued use of SwiftCart after changes take effect constitutes your acceptance.