Privacy Policy

To operate a secure marketplace, we collect the following essential data:

• Account & Profile Data: Your name, university email address, phone number, and campus location. Access credentials are cryptographically secured using industry-standard encryption and are never stored in plaintext.
• Financial Data: Your in-app wallet balance and verified bank details for withdrawals. We do not store payment card data; all card processing is securely routed through our licensed payment gateway.
• Technical & Usage Data: Standard device identifiers necessary for routing notifications, as well as platform activity (search queries, transaction history, and engagement metrics) to optimize the marketplace experience.
• Fulfillment Data: Delivery addresses and contact numbers required for the physical fulfillment of campus orders.

We utilize your information strictly to operate and secure the platform:

• To execute and protect financial transactions via our Escrow infrastructure.
• To verify vendor identity and manage marketplace Status tiers.
• To enforce Community Guidelines and prevent fraudulent activity.
• To deliver essential platform updates and transactional notifications.

Tarra does not sell your personal data. We securely share necessary data only with vetted, enterprise-grade infrastructure partners required to operate the platform:

• Payment Processors: Transaction and identity data are securely transmitted to Paystack to manage the Escrow system and facilitate payouts.
• Service Providers: We utilize secure cloud infrastructure for data hosting, image delivery, and automated notifications.
• Counterparties: To fulfill an order, a seller receives only the buyer’s name, delivery location, and contact number.

The Tarra application will only request device permissions (such as Camera, Photo Library, or Push Notifications) when explicitly required to utilize a specific feature, such as uploading a product or receiving order alerts.

• Retention: Account data is retained while the account is active. Transactional records are retained as required by financial compliance and audit regulations.
• Deletion: You maintain the right to request complete account deactivation and data deletion at any time via the in-app Settings menu. Upon a formalized deletion request, personal identifiers are permanently removed from our active databases.

In compliance with the Nigeria Data Protection Act (NDPA), you maintain the right to access, rectify, or request the erasure of your personal data. You may also withdraw consent for non-essential communications via your in-app preferences.

For all privacy-related inquiries or data requests, please contact our team via the in-app Support system.