CyberShop never collects payment. We are a catalogue and an introduction, not a shop. Agree the details on WhatsApp, then verify the goods or service and only pay the seller when you are satisfied.

CyberShop
SavedSign inSell on CyberShop

Privacy Policy

Last updated: September 2026

The short version

We collect the minimum needed to run the market: your account details, your catalogue, and coarse analytics. We never sell your data. We never take or hold buyer payments. Buyer phone numbers belong to buyers — they only reach a vendor when the buyer chooses to message that vendor on WhatsApp.

What we collect

  • Accounts: name, email, phone (vendors), password (stored only as a salted one-way hash).
  • Vendors: business profile, catalogue, WhatsApp numbers you publish, and payment records for your platform subscription.
  • Buyers: nothing by default. If you create an account: your name, email, and saved items. Guests browse with zero data beyond an anonymous session cookie.
  • Analytics: page views, WhatsApp-click counts, and an IP address that is stored only as a salted one-way hash — we cannot reverse it to your IP.

What we never do

  • We never sell or rent personal data.
  • We never charge buyers or touch buyer↔vendor money.
  • We never publish your private information (password hashes, payment proofs, your non-public WhatsApp numbers).

Who processes data with us

  • Cloudflare — application database and edge network.
  • Vercel — the website itself.
  • Paystack — only for vendor subscription payments to CyberShop (when you pay by card).
  • Email provider — only to deliver transactional email you need (password resets, payment receipts, renewal reminders).

Your rights (NDPR-aligned)

Signed-in people can download a copy of their data and close their account from account settings. Closing a vendor account unpublishes the storefront. Payment records stay for the period Nigerian bookkeeping requires. For anything the form cannot do, contact us — we respond within 30 days.

Cookies

One session cookie (only when you sign in) and one anonymous visitor cookie used for counting views and clicks. No advertising cookies, no third-party trackers.

Retention

Account and payment records are kept as long as your account is active, plus the period Nigerian bookkeeping rules require for financial records. Analytics events are kept in aggregate form.

Changes

If this policy changes materially, we announce it on the platform and email account holders where appropriate.