Privacy Policy

What we collect

CAMPORA may collect account details such as your name, email address, campus, avatar, and information you choose to include in listings or messages. If you apply for verification, we may process student enrolment documents or vendor identity/business information, including a NIN where requested by the vendor-verification flow. Payment processing may also involve payment references and confirmation details. Do not include passwords, one-time codes, or unnecessary sensitive information in listings or messages.

How we use information

We use information to provide accounts, listings, messaging, notifications, verification, payment reconciliation, moderation, appeals, fraud prevention, and other marketplace functions. We aim to use information only for stated and legitimate purposes and limit access according to role and need.

Verification documents and sensitive information

Verification documents are intended for authorised review and should be stored in private storage, not exposed through public profiles or listings. Access should be limited to the applicant and authorised reviewers. NIN and identity documents require additional care. CAMPORA should establish and publish a retention schedule and securely delete documents when they are no longer needed, subject to applicable legal obligations.

Payments

Verification payments are initiated through Paystack when payment configuration is enabled. CAMPORA's server uses the provider's transaction-verification response to confirm the amount, currency, reference, and application before marking verification complete. CAMPORA should not store card details or Paystack authentication secrets in the browser or source repository.

Moderation and appeals

Where needed to enforce marketplace rules and protect users, CAMPORA may retain reports, evidence references, confirmed violations, strike history, enforcement decisions, and appeal outcomes. A report alone is not treated as proof of a violation. Access to moderation records should be limited to authorised staff and the affected user as appropriate.

Data storage and providers

CAMPORA uses Supabase for authentication, database storage, and file storage, and may use Paystack to process verification payments. These providers process information as necessary to deliver their services under their applicable terms and privacy documentation.

Your privacy rights

For users in Nigeria, the Nigeria Data Protection Act 2023 provides data-subject rights and obligations for organisations processing personal data. Contact CAMPORA through its published support route to request access, correction, objection, or deletion, subject to applicable law and any lawful retention requirements.

Security

CAMPORA uses access controls, row-level database policies, protected routes, and server-side payment verification. No internet service can guarantee absolute security. If you believe your account or information has been compromised, contact CAMPORA support promptly.