Privacy Policy

ChatCart ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

By using ChatCart, you agree to the collection and use of information in accordance with this policy.

Account Information: When you register, we collect your name, email address, and phone number for identity verification and communication purposes.

Store & Product Data: Information you provide when setting up your store — store name, product listings, pricing, descriptions, and images — is stored in our Firebase Firestore database.

Order & Transaction Data: Order details including items, quantities, prices, delivery addresses, and order status. Payment processing is handled entirely by Paystack; we do not store card numbers or payment credentials.

Location Data: With your permission, we may collect your device location to prefill delivery settings and improve local discovery. You can deny or revoke this permission at any time.

Device & Usage Data: We may collect device identifiers, app version, and usage analytics to improve performance and fix bugs.

Media: Photos, videos, and audio files you upload for product listings are stored securely in Firebase Storage.

We use your data to: operate and provide the ChatCart service; process orders and facilitate payments through Paystack; send you order notifications and service updates; allow buyers and sellers to communicate in-app; improve, personalise, and develop our services; and ensure platform security and prevent fraud.

We do not sell your personal data. We share data only in the following circumstances:

With Paystack: Payment and payout information is shared with Paystack for transaction processing. Paystack's Privacy Policy governs their use of this data.

Between Buyers and Sellers: When a transaction occurs, relevant contact information (such as your display name and store name) is shared with the other party to facilitate fulfilment.

With Firebase (Google): Our infrastructure runs on Google Firebase. Data is stored and processed according to Google's data processing agreements.

Legal Requirements: We may disclose data if required by law or to protect our rights and the safety of our users.

We implement Firebase Firestore security rules that ensure users can only access their own data. All data is transmitted over HTTPS with TLS encryption. Sensitive operations require authenticated sessions. We conduct regular security reviews of our database access rules.

We retain your account data for as long as your account is active. Order and transaction data is retained for a minimum of 7 years for financial compliance. You may request deletion of your account and associated data by contacting us at privacy@chatcart.app.

You have the right to access, correct, or delete your personal data; withdraw consent for location access at any time; request a copy of your data; and lodge a complaint with a data protection authority.

ChatCart is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us immediately.

For privacy-related questions: privacy@chatcart.app