Privacy And Data Protection Policy

This Privacy and Data Protection Policy applies to buyers, vendors, manufacturers, logistics users, sourcing users, staff users, and other account holders who interact with Zedtra websites, apps, checkout flows, onboarding forms, verification systems, wallets, support tools, messaging systems, and legal review processes.

Zedtra is a commerce platform connecting buyers, vendors, manufacturers, and delivery and sourcing services. In this policy, 'Zedtra', 'we', and 'us' refer to the operator of the Zedtra service at www.zedtra.com, responsible for the processing described here. Privacy questions and requests can be sent to support@zedtra.com.

You can browse the public marketplace without creating an account. Information required for an account, purchase, delivery, verification, or payout depends on the features you choose. This policy explains our practices; it does not replace any separate consent required for optional processing.

Google sign-in is optional; email sign-in is also available. When you choose Continue with Google, Google shares basic account information with our authentication provider, Clerk: your Google account identifier, name, email address and verification status, and profile picture when available. These correspond to basic OpenID Connect identity, email, and profile permissions.

Clerk manages authentication and the connection to your Google account. Zedtra stores a Clerk user identifier, email address, name, and a platform handle in its application database to create or recognize your account, maintain your session, associate orders and messages with you, and provide account support. Clerk may retain your connected-account profile, including its picture, as part of your authentication record.

This sign-in feature does not request access to Gmail messages, Google Drive files, Google Contacts, or Google Calendar. Zedtra does not receive your Google password. We use Google sign-in data for authentication and account functionality, not to sell it, target advertising, or train generalized AI models.

Google sign-in data is processed through Google and Clerk and stored with the service providers needed to operate your Zedtra account. It is not provided to sellers as a separate Google profile; order-related contact information may be shared as explained below. Zedtra's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

Checkout uses recipient contact details, country, state, city, and delivery address to process orders and estimate delivery. When live map pricing is configured, seller and buyer address information is sent to Google Maps services to determine locations and route distance. This is separate from Google sign-in and does not require access to your Google account.

Paystack processes checkout and verification payments and vendor transfers. Zedtra stores transaction references, amounts, currencies, payment status, order and wallet records, and payout bank details needed for reconciliation and withdrawals. Card entry is handled by the payment provider; Zedtra does not ask you to send card PINs, payment OTPs, or Google passwords to support.

Listings, store names, handles, published profile details, reviews, and media that you publish can be viewed by other users and public visitors. Messages are shared with their intended recipients and may be reviewed by authorized support or administrators when handling support, disputes, abuse, or legal obligations. Do not publish identity documents, bank credentials, or another person's private information in public content.

Seller verification may require government identification and captured selfies. We store submitted images, document references, review results, and verification payment records to assess identity, reduce impersonation, and administer verification status. The current face-verification submission flow uses administrator review. Submitting a selfie is not permission to use it in public marketing.

Business-document checking may use Google's Gemini service, when configured, to extract business identity details from an uploaded document and assist business-name or payout-account matching. This is separate from Google sign-in. Documents submitted for this check may therefore be processed by Google as well as Zedtra's storage providers and authorized reviewers.

Verification records are used for identity and compliance review, not as public profile content. Please use the designated upload forms instead of posting documents in listings or sending them through unofficial channels.

Depending on the account type and how the platform is used, Zedtra may collect names, email addresses, phone numbers, usernames, delivery addresses, bank account details, payout details, business profile details, corporate registration details, tax-related details, message content, uploaded media, order history, wallet history, device and browser information, IP addresses, fraud indicators, and related account activity records.

For seller-side or compliance-sensitive accounts, Zedtra may also collect business documents, government-issued identification, NIN details, passport information, selfies, face-verification images, verification review notes, bank-name matching records, and any additional information reasonably required for KYC, enhanced due diligence, fraud review, dispute handling, payment compliance, or lawful reporting.

Zedtra collects and processes data to create and manage accounts, authenticate users, process orders and payments, calculate service fees, route payouts, support delivery and refund review, investigate fraud, verify businesses and identities, respond to support issues, enforce marketplace rules, protect buyers and sellers, and defend the platform against abuse, theft, impersonation, and payment loss.

We may also use collected data to improve platform safety, monitor system integrity, prevent duplicate or fake business accounts, support moderation, analyze marketplace activity, maintain audit records, meet processor requirements, comply with lawful obligations, and respond to regulators, tax authorities, courts, banks, or law enforcement where legally required or reasonably necessary.

Where applicable, Zedtra may process data because it is necessary to provide marketplace services, perform contracts with users, operate checkout and payout workflows, protect legitimate interests of the platform and its users, prevent fraud, comply with legal obligations, respond to lawful investigations, or act on user consent where consent is the appropriate basis.

Some data is operationally mandatory. If required identity, bank, or compliance data is not provided where needed, Zedtra may be unable to open, maintain, verify, or continue the relevant account, listing, payout function, or payment flow.

Zedtra uses a combination of platform databases, controlled storage systems, access restrictions, provider-side security measures, and internal review controls to store account, payment, and compliance-related data. We aim to limit access to staff, systems, or contractors who reasonably need that access for support, moderation, verification, legal review, payments, security, or platform operations.

Authentication records are managed through Clerk. Application records are stored in our hosted database, and uploaded files use cloud object storage. We use authenticated routes and role-based checks for restricted operations. No online service or transmission method can guarantee absolute security; protect your email and Google account and report suspected unauthorized access promptly.

Zedtra may retain data for as long as reasonably necessary for account management, dispute review, refund support, payout history, fraud prevention, legal defense, tax or accounting records, compliance review, regulator requests, audit support, or lawful investigations.

Even after an account is closed or restricted, certain records may be retained where deletion would interfere with legal obligations, payment review, fraud monitoring, historical transaction support, enforcement of our rights, or preservation of evidence relating to disputes or suspected unlawful conduct.

Retention depends on the record's purpose, whether an order, payout, complaint, or investigation remains open, and applicable legal requirements. Google-derived account data follows the account retention and deletion process below. When information is no longer needed for those purposes, it should be deleted or anonymized; backup copies may persist until replaced through the relevant provider's backup lifecycle.

Service providers process information needed for their functions: Clerk for authentication; Paystack and banking partners for payments and transfers; hosting, database, and object-storage providers for running the service; and Pusher, where configured, for real-time events and notifications. Google Maps and Gemini processing is described above. Providers may also process information under their own privacy policies.

Sellers and delivery participants receive relevant order, recipient, contact, and delivery details to fulfill purchases, resolve issues, or arrange returns. Other users receive content or messages you choose to share with them. We do not sell Google user data. Access by staff, contractors, and professional advisers is for relevant operational, support, security, or legal purposes.

We may also disclose data to regulators, tax authorities, courts, law enforcement, anti-fraud bodies, sanctions reviewers, or other lawful authorities where required by law, subpoena, court order, investigation, tax reporting requirement, anti-money-laundering review, fraud inquiry, or other valid legal or regulatory request.

Zedtra and its service providers may store or process information outside your country, including in countries with different data-protection laws. Where applicable law requires safeguards for a transfer, we must use the appropriate contractual or other lawful protections. Contact us for information about processing relevant to your account.

Authentication cookies and browser storage support sessions, cart contents, and preferences. Service infrastructure may process IP addresses, browser information, and request logs to deliver and secure the app. Optional cookie choices, where offered, are separate from essential storage required for a requested feature.

If you enable phone notifications, Zedtra stores a device-specific push subscription endpoint and encrypted delivery keys and sends them to the browser's push service only to deliver requested account, message, order, wallet, or security alerts. Notification permission is optional, can be disabled in Zedtra's notification settings or your device settings, and does not remove in-app messages.

Camera access is requested for features such as selfie capture. You can refuse or revoke camera permission in your browser or device settings, although camera-dependent features will then be unavailable. Clearing cookies may sign you out; uninstalling the installed web app does not delete your account or server-side records. See our Cookie Notice for more information.

Depending on applicable law, including Nigeria's data-protection law where it applies, you may request access to your personal data, correction, deletion, a portable copy, restriction of processing, or object to certain processing. Where processing relies on consent, you may withdraw it without affecting processing that was lawful before withdrawal. You may also complain to the Nigeria Data Protection Commission or another competent data-protection authority.

To request access, correction, or deletion, email support@zedtra.com from your registered email address with the subject 'Zedtra privacy request' or 'Zedtra account deletion'. Include your account handle and describe your request. Do not include passwords, OTPs, or full payment-card details. We may ask for proportionate identity verification before releasing or deleting information.

For an account-deletion request, we review the application account, associated authentication record, Google-derived profile data, and uploaded information within our control. Some transaction, dispute, security, or compliance records may need to remain for the purposes described in the retention section. We will explain applicable exceptions or steps needed to resolve an open transaction and respond within the time required by applicable law. Deleting your Zedtra account does not delete your Google account.

You can also revoke Zedtra's Google connection in your Google Account under Security or Your connections to third-party apps and services. Removing access stops that connection but does not automatically delete information already stored by Zedtra or settle existing orders. Send a deletion request if you also want stored account data removed.

Where Zedtra requires business verification or payout approval, we may compare submitted documents, account names, business names, store profile details, bank details, face-verification records, and other identifiers to determine whether a seller appears genuine, consistent, and eligible for platform use or withdrawal access.

Bank accounts that do not reasonably match the business name supported by verification records may be rejected or restricted. We may store the related review outcome, matching notes, and supporting records to protect Zedtra and other users from identity abuse, disputes, or payout fraud.

Users must provide accurate information, keep account credentials confidential, and avoid uploading forged, borrowed, misleading, or unauthorized documents or content. A user who provides false data, shares credentials carelessly, or misuses another person's identity or business records may face account restrictions, record preservation, legal escalation, or lawful disclosure.

Users should not send highly sensitive documents through unofficial channels when the platform already provides a required upload path. Zedtra may treat off-platform submission of sensitive information as unsupported, insecure, or non-compliant with our review process.

Zedtra is not directed at children. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and take the action required by applicable law.

We may update this policy as features, providers, or legal requirements change. The updated date will appear on this page. Material changes requiring additional notice or consent will be handled as required by applicable law. This policy does not waive your statutory privacy rights.