Kampus Plug is operated by Skyreal Tech Labs Ltd (RC 9911711), which is responsible for your personal information (“Kampus Plug”, “we”, “us”). We run a marketplace at kampusplug.com where students buy from approved student vendors on their campus, and buy and sell fairly used items with each other. This policy explains what personal information we collect, why we collect it, who we share it with and the choices you have. It applies to our website, our installable web app and our related services.

Information you give us

• Your account: your name, email address, password (stored only as a one-way hash, never in plain text), your campus and, if you add it, your phone number.
• Your shop, if you sell: shop name, description, logo, category, pickup point, address and phone number, plus your department, course, level, student ID photo and verification photos, which we use to approve your shop.
• Your orders: what you buy, the delivery point or address you choose, your contact phone number and any note you leave for the vendor.
• Payments and payouts: your wallet top-ups and transactions, and the bank account name, number and bank you save so we can pay you for your sales. If you ask for a dedicated bank account for topping up your wallet, we collect your BVN, date of birth, gender, phone number and address and pass them to our payment partner so they can verify your identity and open the account. We don’t store your BVN.
• Fairly used: the items you list, with their photos, description, price, condition, campus and meetup spot; the offers you make, receive and answer; your deals; and any problem or report you send us.
• What you post: product listings, photos and videos, reviews, and messages you send to buyers, sellers or vendors.

Google user data

If you choose Continue with Google, Google shares your name, email address, whether that email is verified, and your Google account ID with us. We ask only for Google’s basic sign-in permissions (openid, email and profile). We never receive your Google password, and we can’t see your Gmail, contacts, Drive or any other Google data.

We use this information only to create your Kampus Plug account or sign you in, and to link Google sign-in to an existing Kampus Plug account with the same email address. We store your name, email address and Google account ID with your account.

• We don’t sell Google user data or use it for advertising.
• We don’t share it with anyone, except the service providers who host Kampus Plug for us, or where the law requires it.
• We don’t use it to train artificial intelligence or machine learning models.

Kampus Plug’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove Kampus Plug’s access at any time from your Google Account permissions. That stops future sign-ins with Google. To delete the information we already hold, see Deleting your account.

Information we collect automatically

• Sign-in cookie: a cookie that keeps you signed in. We don’t use advertising or cross-site tracking cookies.
• Browser storage: a few settings saved on your device, such as your signed-in profile and whether you’ve dismissed the notification prompt.
• Device and log information: your IP address, browser type and the requests your device makes, which we use for security, rate limiting and fraud prevention.
• Notification token: if you turn on push notifications, a token that lets us send them to your device.

How we use your information

• To run the marketplace: your account, listings, cart, checkout, orders, delivery, holding payments and payouts.
• To run Fairly used: showing your listings, passing offers between buyers and sellers, holding payments until the handover, and looking into problems that are reported.
• To review shops before they can sell, and to keep fake or unsafe vendors off Kampus Plug.
• To send you messages about the service, such as order updates, completion codes, password reset codes and payout updates, by email and push notification.
• To prevent fraud and abuse, look into disputes and enforce our Terms of Service.
• To help when you contact us. Authorised Kampus Plug staff can view your account as you see it, for a limited time and with each visit recorded, to fix a problem or investigate an issue.
• To meet our legal obligations, and to understand and improve how Kampus Plug works.

We don’t sell your personal information and we don’t show third-party ads.

Under the Nigeria Data Protection Act 2023, we rely on these legal bases: performing our contract with you, our legitimate interests in keeping Kampus Plug safe and working, complying with the law, and your consent (for example, for push notifications, which you can turn off at any time).

What other users can see

• When you place an order, the vendor sees your name and the delivery details, phone number and note you give for that order.
• Your shop page is public. It shows your shop name, logo, description, category, campus, pickup point, phone number, products and reviews.
• Reviews you leave show your first name and last initial.
• Your Fairly used listings are public. They show your first name and last initial, when you joined and how many items you’ve sold. Your phone number and email address aren’t shown.
• When you make an offer or a deal on Fairly used, the other person sees your first name and last initial and what you offered or paid.

Who we share information with

We share personal information only with providers that help us run Kampus Plug, and only what they need:

• Squad (GTCO): wallet top-ups and order payments by transfer, card and USSD, dedicated bank accounts and refunds.
• Paystack: confirming the name on the bank account you save for payouts.
• Cloudflare: storing the photos, videos and documents you upload.
• Resend: sending our emails.
• Google: Google sign-in, and Firebase Cloud Messaging for push notifications.
• Hosting and database providers that run our website and servers.
• YouTube: videos in our seller guide are played from YouTube, which may set its own cookies when you play them.

We may also share information when the law requires it, to protect the rights, property or safety of our users or Kampus Plug, or as part of a merger or sale of our business, in which case we’ll tell you first.

Some of these providers process data outside Nigeria. When they do, we rely on the safeguards the Nigeria Data Protection Act requires.

How long we keep it

• Your account, shop and listings: while your account is open.
• Student ID and verification photos: while your shop is open. If we reject a shop application, we delete its photos 30 days after the decision.
• Push notification history: 90 days.
• Password reset codes: one day after they expire.
• Records of orders, payments and payouts: kept after your account is deleted, because we need them for our accounts, tax, fraud prevention and disputes. Your name, email address and phone number are removed from your account when it is deleted.

How we protect it

We use HTTPS everywhere, store passwords only as hashes, use short-lived sign-in tokens and limit who on our team can access personal information. No system is perfectly secure, so if you think your account has been compromised, contact us straight away.

Your rights

You can ask to see the personal information we hold about you, correct it, delete it, get a copy of it, or object to or restrict how we use it. You can also withdraw consent you’ve given us. Email support@kampusplug.com from your account’s email address and we’ll respond within 30 days. If you’re unhappy with our response, you can complain to the Nigeria Data Protection Commission.

Deleting your account

Email support@kampusplug.com from your account’s email address with the subject “Delete my account”. Spend or ask us to refund any wallet balance, wait for any payout to arrive, and finish or cancel open orders first.

• Once we accept your request, you’re signed out and can’t sign back in. For 30 days you can change your mind by emailing us.
• After 30 days we permanently delete your name, email address, phone number, password, Google sign-in details, saved bank account, student ID and verification photos, push notification details, and the delivery addresses, phone numbers and notes on your past orders. We also close your shop and take your listings down.
• Records of your orders, payments and payouts stay, with no name or contact details on your account. A past payout record keeps the bank account it was paid to. Reviews and messages you sent stay visible to the people who received them, without your name.

Under 18s

Kampus Plug is only for people aged 18 and above. We don’t knowingly collect personal information from anyone under 18. If we learn that an account belongs to someone under 18, we close it and delete their information. If you think someone under 18 is using Kampus Plug, email support@kampusplug.com.

Changes to this policy

If we change this policy, we’ll update the date at the top. If the changes are significant, we’ll also tell you by email or in the app before they take effect.

Contact us

Questions about your privacy or this policy? Email support@kampusplug.com. You can also read our Terms of Service.