Privacy Policy

Who we are

GadgetVault (“GadgetVault”, “we”, “us”) provides software that helps licensed used-phone dealers in Nigeria create a verified, tamper-proof record of every phone they purchase. For the seller identity data captured in those records, the dealer business is the data controller and GadgetVault acts as their processor. For dealer account data, GadgetVault is the controller.

Information we collect

Dealer account information

• Business name, address, and state of operation
• Owner and staff names, email addresses, and phone numbers
• Login credentials (passwords are hashed by our authentication provider — we never see them)
• Subscription status, wallet balance, and billing history

Purchase-record information (about the seller)

When a dealer logs a purchase, GadgetVault records the following about the person selling the phone:

• National Identity Number (NIN) and the verified identity returned by the identity provider — full name, date of birth, gender, and address
• The seller’s phone number
• A photo of the seller, captured at the time of sale
• The device IMEI(s), make, model, condition, and agreed price
• Photos of the device and, optionally, a receipt

This information is provided by the seller to the dealer at the point of sale and is central to the legal chain-of-custody purpose of the service.

Technical information

We collect standard technical data needed to operate the service securely, such as the timestamp a record was created and the staff account that created it.

How we use information

• To create and store verified, immutable purchase records
• To verify seller identity through our identity-verification provider
• To operate dealer accounts, subscriptions, and wallet billing
• To power the optional public marketplace, where a dealer may list a device for resale
• To protect the security and integrity of the platform and prevent fraud

We do not sell personal data, and we do not use it for advertising or cross-app tracking.

Third parties we share data with

We share data only with the service providers needed to run GadgetVault:

• Identity verification provider — to confirm a seller’s NIN-linked identity.
• Paystack — to process subscription and wallet payments (payments happen on our website, never in the mobile app).
• Supabase — our database, authentication, and encrypted file storage provider.

We do not share seller identity data with any dealer other than the one who created the record.

How we protect data

• All data is encrypted in transit (HTTPS).
• Sensitive identity fields, including the seller’s NIN, are encrypted at rest.
• Photos are held in private storage and served only through short-lived signed links.
• Access is enforced by row-level security so a dealer can only ever see their own records.

Data retention

Purchase records exist to provide a legally defensible chain of custody. Because a device may be traced by authorities long after a sale, completed purchase records are retained for the life of the business account and as required to meet legal and regulatory obligations, even after an individual staff member’s account is closed.

Deleting your account

You can delete your GadgetVault account at any time — in the mobile app under Profile → Delete account, on the web under Settings, or by contacting us. When you delete your account:

• Your login is permanently removed and you can no longer sign in.
• Your personal profile details (name, email, phone) are erased or anonymised.
• The purchase records you created are retained in anonymised, non-attributable form to preserve the legal chain of custody required by the service, as described above.

If you need the personal data within a specific record handled differently, contact us and we will respond in line with applicable law.

Your rights

Subject to the legal-retention limits above, you may request access to, correction of, or deletion of your personal data. Sellers who wish to exercise rights over data held in a dealer’s record should contact that dealer; we will support the dealer in responding.

Children

GadgetVault is a business tool and is not directed to anyone under 18.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.

Contact us

Questions about privacy or a data request? Email privacy@gadgetvault.app or visit our contact page.