Privacy Policy
This Privacy Policy explains how AgriStock (“we”, “us”) collects, uses, stores, and shares personal data when you use agristock.org, app.agristock.org, and related services (the “Services”). We aim to comply with the Nigeria Data Protection Act 2023 (NDPA) and related regulations.
1. Data we collect
- Identity & contact: name, email, phone, Telegram ID (if provided), password (stored as a secure hash).
- KYC / compliance: government ID details you submit (e.g. NIN/BVN-related fields), verification status, and supporting documents where required.
- Financial & transaction: wallet activity, investments, withdrawals, bank account name/number for payouts, payment references from providers such as Paystack.
- Technical: device/browser type, IP address, approximate location, logs, and security signals (including bot-protection tokens such as reCAPTCHA).
- Communications: support messages and OTP delivery metadata (not the long-term storage of OTP codes beyond verification needs).
2. How we use data
- Create and secure your account; send OTP and service emails/SMS;
- Process Farm lot investments, wallet funding, and withdrawals;
- Complete KYC, fraud prevention, and legal compliance;
- Operate, improve, and protect the Services;
- Respond to support requests and send important service notices;
- With your consent where required, send product updates (you may opt out of marketing).
3. Legal bases (NDPA)
We process personal data where one or more of the following apply:
- Performance of a contract with you (providing the desk and wallet);
- Compliance with legal obligations (e.g. anti-fraud / KYC expectations);
- Legitimate interests (security, product improvement) balanced against your rights;
- Consent, where we ask for it (e.g. certain marketing or optional channels).
4. Sharing
We may share data with:
- Processors who help us run the Services (cloud hosting, email/SMS such as Resend or Termii, payments such as Paystack, analytics if enabled);
- Professional advisers and auditors under confidentiality;
- Authorities when required by law or to protect rights and safety;
- A successor entity in a merger or restructuring, with notice where required.
We do not sell your personal data.
5. International transfers
Some processors may store or process data outside Nigeria. Where we transfer personal data internationally, we take steps consistent with NDPA requirements (such as appropriate contractual safeguards).
6. Retention
We keep data only as long as needed for the purposes above, including legal, accounting, and dispute periods. Transaction and KYC records may be retained longer where law or fraud-prevention requires.
7. Security
We use technical and organisational measures appropriate to the risk (encryption in transit, access controls, hashed passwords, rate limits). No method of transmission or storage is 100% secure.
8. Your rights
Subject to NDPA exceptions, you may request to:
- Access, correct, or delete personal data;
- Object to or restrict certain processing;
- Withdraw consent where processing is consent-based;
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
To exercise rights, contact us via the Contact page. We may need to verify your identity.
9. Children
The Services are not directed to persons under 18. We do not knowingly collect children’s data.
10. Cookies and similar technologies
We use essential cookies/local storage for login sessions and security. Any non-essential analytics cookies will be described in-product or updated here if introduced.
11. Changes
We may update this Policy. The “Effective date” will change when we post updates. Continued use after updates constitutes acceptance where permitted by law.
12. Contact
Privacy questions: Contact AgriStock.
© AgriStock. This policy is maintained by AgriStock and applies to all processing of personal data carried out through our platform.