DepMi Limited ("DepMi") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.
Account data: Name, email address, phone number, date of birth, profile photo, and username when you register.
Identity verification data: BVN and NIN reference tokens (we store Dojah verification reference IDs only — we never store raw BVN or NIN numbers).
Transaction data: Order details, payment references, escrow records, and Dep transaction history.
Behavioural data: In-app interactions including products viewed, feed impressions, searches made, items liked or saved, and bids placed — collected to improve the platform and personalise your experience. We collect a session identifier stored in your browser's local storage to group interactions anonymously. We do not use third-party tracking tools.
Device data: IP address, browser type, and device identifiers for security and fraud prevention.
We process your data under the following lawful bases as defined by the Nigeria Data Protection Act 2023 (NDPA):
We share your data only with:
We never sell your data to third parties for advertising.
We retain account data for as long as your account is active. Transaction records are retained for 7 years as required by Nigerian financial regulations. Raw behavioural event data is automatically purged after 90 days — only aggregated summaries are kept long-term. You may request deletion of non-transaction data at any time.
All data is encrypted in transit (TLS). Passwords are hashed with bcrypt (12+ salt rounds). Payment credentials are never stored — only tokenised references from Flutterwave. We conduct regular security audits and rate-limit sensitive endpoints.
You have the right to:
To exercise these rights, email privacy@depmi.com.
DepMi uses session cookies for authentication and local storage for user preferences and an anonymous session identifier used in behavioural analytics. We do not use third-party advertising cookies or tracking pixels.
DepMi is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us at privacy@depmi.com.
We may update this policy. Material changes will be communicated by email or in-app notification. Continued use after changes constitutes acceptance.
Data protection queries: privacy@depmi.com