Privacy Policy

Last updated: June 2026 · Applies to exhubb.com and the Exhubb marketplace

1. Who we are

Exhubb ("we", "us", "our") operates an escrow-protected online marketplace for digital goods and services at exhubb.com. We are committed to protecting your personal data and handling it in line with the Nigeria Data Protection Regulation (NDPR) and other applicable laws. This policy explains what we collect, why, and the choices you have.

2. Information we collect

Account information — email address, password (stored only as a secure hash), and the name, username, bio and optional profile picture you provide when you become a seller.
Transaction information — listings you create, purchases and sales, wallet top-ups and balances, escrow and dispute records, reviews you leave or receive, and messages exchanged inside orders.
Verification information — if you apply for the Verified Seller badge, the identity details and links you submit for manual review.
Payment information — payments are processed by our payment partners (e.g. Flutterwave for bank/card payments and our crypto payment processor). We receive confirmation details such as amount, reference and status. We never see or store your full card number, PIN or bank login.
Technical information — IP address, approximate country (used, for example, to show the right payment methods), device and browser type, and usage logs needed to keep the service secure.

3. How we use your information

To operate your account, wallet and the escrow system — holding, releasing and refunding payments correctly.
To deliver transactional emails such as verification, password reset and order notifications.
To prevent fraud, scams, payment reversal abuse and other violations of our Terms.
To review Verified Seller applications and resolve disputes fairly.
To improve the product and fix problems, using aggregated, de-identified usage data where possible.
To comply with legal obligations, including responding to lawful requests from competent authorities.

4. Legal bases

We process your data because it is necessary to perform our contract with you (running your account and orders), because of our legitimate interests (security, fraud prevention, service improvement), with your consent where required (e.g. optional marketing), and to comply with legal obligations.

5. How we share information

Other users — your seller username, profile, ratings, reviews, seller level and listing details are public. Buyers and sellers in an order can see each other's order messages and delivery details. Your email address is never shown publicly.
Service providers — payment processors (e.g. Flutterwave, our crypto processor), email delivery (Resend), and hosting/infrastructure providers, strictly to provide the service.
Legal — where required by law, court order, or to protect Exhubb, our users or the public from fraud and abuse.

We do not sell your personal data to anyone.

6. Cookies and local storage

We use essential browser storage to keep you signed in, remember preferences (such as dismissing prompts), and keep the site secure. We do not use third-party advertising cookies on exhubb.com.

7. Data retention

We keep account and transaction records for as long as your account is active and as required for legal, accounting, dispute-resolution and fraud-prevention purposes. When data is no longer needed, it is deleted or anonymised.

8. Security

Passwords are hashed, traffic is encrypted with HTTPS, payment card details never touch our servers, and access to production data is restricted. No system is 100% secure, but we work to protect your data using industry-standard measures, and escrow funds are tracked with auditable records.

9. Your rights

Subject to applicable law (including the NDPR), you have the right to access the personal data we hold about you, correct inaccurate data, request deletion of your account and data (subject to records we must keep for legal and dispute purposes), and object to or restrict certain processing. To exercise any right, contact support and we will respond within a reasonable time.

10. Children

Exhubb is not intended for anyone under 18. We do not knowingly collect data from minors; if we learn that we have, we will delete it.

11. International transfers

Our infrastructure and service providers may store or process data outside Nigeria. Where they do, we take steps to ensure your data receives an adequate level of protection.

12. Changes to this policy

We may update this policy from time to time. Material changes will be announced on the site. Continued use of Exhubb after changes take effect means you accept the updated policy.

13. Contact

Questions or requests about your data: support@exhubb.com.