Privacy policy

Last updated 4 October 2026

This policy explains how Stall ("we") collects and uses your personal data when you use Stall, and your rights under the Nigeria Data Protection Act 2023 (NDPA). We are the data controller for the data described here.

What we collect

• Account details: name, phone (WhatsApp) number, email, school, state, matric number (students), business name and location (vendors), and your password in scrambled (hashed) form.
• Verification documents you choose to send, such as a student ID card, course registration form, school fees receipt, admission letter or shop photo. We read them with an automated check that compares the name and school with your account; if it isn't sure, a member of the Stall team looks. Only the Stall team can see them.
• Email address, which we confirm with a one-time code, to verify you're a student (school addresses), send order updates and reset your password. You can turn order emails off in Account → Email updates.
• Selling details: listings, photos, prices, stock, store details and payout bank details (bank, account number and account name).
• Messages: chats between buyers and sellers in the app. We look at a chat only if someone reports it, if we're reviewing a problem with an order, or to stop fraud (for example, warning you when a message asks you to pay outside Stall).
• Orders and payments: what you bought or sold, amounts, payment references, release-code use, and receipt photos from older orders. We do not see or store your card details; card payments are handled by Paystack.
• Location, only if you choose to share it: a meeting-spot pin you drop on the map for an order, and your live location while you have the live delivery screen open and sharing switched on. We keep only your latest position (never a trail) and delete it when the order is handed over, cancelled or refunded, when you stop sharing, after 90 minutes, or after an hour without an update. Only the other side of that order sees it.
• Technical data: basic device and log information (such as IP address and browser type) needed to run and protect the service.

Why we use it, and our legal basis

• To create your account and run the marketplace: showing listings, processing orders, release codes and notices (to perform our contract with you).
• To check listings and identity documents, including with automated tools, and to prevent fraud and keep users safe (legitimate interests and legal obligations).
• To take payments for orders, store fees and other services through Paystack, and to have Paystack pay sellers their share of each order (contract).
• To show the other side of an order where you are and when you'll arrive, while you choose to share your location (consent, which you withdraw by tapping Stop sharing or closing the screen).
• To send you service messages, and marketing only if you agree (consent, which you can withdraw at any time).

Automated checks

We use an AI image model to compare listing photos with their descriptions and to read verification documents. If a check doesn't clearly pass, a person reviews it. Automated checks never close your account on their own; you can ask for a human review of any decision.

Who we share it with

• Problem reports and ratings: notes and photos you send about an order go to the other side of that order and to the Stall team. Sellers see the average rating other sellers gave a buyer; buyers see the seller's ratings, replies and how many orders they cancelled or didn't send. We keep a record of strikes on your account.
• Collections: when you pay into a group collection, the person collecting sees your name, matric number (or phone number), amount and payment time. Other people with the link see your name and the last 4 digits of your matric number only if the collector chooses to share the list.
• Other users, as needed for a sale: buyers see the seller's name, school, meet-up spot and phone number; sellers see the buyer's name and phone number for their orders. If you share your live location or drop a meeting-spot pin, the other side of that order sees it on a map. Map tiles come from OpenStreetMap, which sees your device's IP address and the map area you look at, like any website, but not your shared location.
• Service providers that process data for us: Cloudflare (hosting, database, and the AI checks), Paystack (payments, bank account name checks, and paying sellers into their payout accounts), Resend (sending emails), your phone's push service (Google, Mozilla or Apple, which only receives a signal to wake the app; the notice itself is fetched from Stall), and Telegram (private alerts to the Stall team about orders, payouts and reports, which can include names, phone numbers and payout account details). If you use voice search, your browser sends your speech to its own speech service (for Chrome, Google) to turn it into text; Stall only receives the text. They may process data outside Nigeria, with safeguards required by the NDPA.
• Authorities or your school, where the law requires it or to investigate fraud or serious safety issues.

We do not sell your personal data.

How long we keep it

• Receipt photos (older orders only): removed 60 days after an order is completed, rejected or expired. Order records (amounts, references) are kept for up to 6 years for accounting, tax and dispute purposes.
• Chats: kept while both accounts are open, so problems with an order can be checked. Sign-in sessions: 30 days, or until you sign out.
• Sold listings: removed 30 days after sale, with their photos.
• Live location: only the latest point, deleted when the trip ends (see above). Meeting-spot pins stay with the order record.
• Verification documents: kept while your verification is active, and deleted when you ask us to close your account.
• Account details: kept while your account is open, then deleted or anonymised unless we must keep them by law.

Security

Passwords are hashed, connections are encrypted (HTTPS), and access to admin tools is restricted to authorised staff. No system is perfectly secure, so please use a strong password and never share it or any OTP.

Deleting your account

You can delete your account yourself at any time: open Stall, go to Account → Delete my account and confirm with your password. See how to delete your account for what is removed and what is kept.

Your rights

Under the NDPA you can ask to access, correct or delete your data, object to or restrict how we use it, receive a copy in a portable format, and withdraw consent. Contact us through and we'll respond within 30 days. You can also complain to the Nigeria Data Protection Commission (NDPC).

Children

Stall is not for anyone under 16. If you believe a child has signed up, contact us and we'll remove the account.

Changes

We'll update the date at the top when this policy changes and tell you in the app about important changes.