We collect only what the marketplace needs to work, and we never sell your data.
Last updated: 22 September 2026
What we collect
- Account data: name, email, phone, password (stored hashed), Google ID if you sign in with Google.
- Store data: store name, logo, banner, location and contact details you choose to publish.
- Transaction data: orders, payments, escrow movements, withdrawals, disputes.
- Technical data: IP address, browser, and an audit log of actions taken on your account.
Why we use it
- To run the marketplace: accounts, listings, escrow, payouts and disputes.
- To keep the platform safe: fraud prevention, rate limiting, audit trail.
- To contact you: verification codes, order updates, support replies, and the newsletter if you subscribed.
Who sees it
- Sellers see the name and delivery details of buyers who ordered from them.
- Payment operators (MTN, Orange via K-Pay) receive the phone number and amount needed to process a payment.
- Email is delivered through Resend. Images are stored on Cloudflare R2.
- Smart Market staff access data only to operate the service and resolve disputes; every access is logged.
Your rights
- Access, correct or delete your personal data by writing to support@smartmarket.dev.
- Unsubscribe from the newsletter at any time.
- Transaction records may be kept as long as required by law or open disputes.
Cookies and storage
We use one httpOnly cookie to keep you signed in, and local storage on your device for preferences, your cart and your wishlist. No advertising trackers.
Security
Passwords are hashed with bcrypt, refresh tokens are stored hashed, all traffic is encrypted in transit, and money-moving operations are protected against replay and double-processing.
Contact
Data controller: Godwin Tech Solution, Douala, Cameroon — privacy@smartmarket.dev.