Privacy Policy
BigPlug connects Nigerian suppliers to resellers and handles the money and delivery in between. This explains exactly what we collect to do that, and what we never do.
Last updated
Who we are
BigPlug operates the BigPlug marketplace, the BigPlug Reseller and BigPlug Wholesaler mobile apps, and the online stores our resellers run. We are based in Lagos, Nigeria, and we are the data controller for the information described here.
Questions about this policy, or about your own data, go to privacy@mybigplug.com.
What we collect, and why
We collect what an order actually needs. There is no advertising ID in our apps, no third-party analytics or tracking SDK, and we do not build advertising profiles.
- Phone number
- This is how you sign in. We send a one-time code by SMS and use the number to reach you about your orders.
- Email address
- Receipts, payout records, and getting back into your account if you change phone. Sellers are asked for this because it is the record of money we paid you.
- Name and business name
- Shown on your storefront and on the orders you handle, so the people you trade with know who they are dealing with.
- Profile and product photos
- Photos you choose to upload for your shop and listings. The app asks for camera or photo-library access only at the moment you tap to add one.
- Bank account details
- Account number, bank, and account name, so we can pay you. We verify the name matches before any money moves. We never see or store your card details, and we cannot take money out of your account.
- Location
- Only when you tap to use it, and only while the app is open — never in the background. A supplier saves their pickup point so agents can find the shop; a delivery agent records where an order was handed over. We do not track your movements.
- Delivery details on an order
- The customer’s delivery address and phone, so the order can be delivered. Sellers see only the orders that are theirs.
- Messages
- Messages you send inside the app to the people you trade with. We store these so the conversation is there when you come back, and so we can act on a report of abuse.
- Device notification token
- A push token, so we can tell you an order came in. You can refuse notification permission and keep using the app.
- Basic technical logs
- Request logs and error records that keep the service running and secure. These are not used to profile you.
What we never do
- We do not sell your personal data. Not to anyone, at any price.
- We do not use your data for advertising, and we do not share it with advertising networks or data brokers.
- We do not track you across other apps or websites. Our apps request no tracking permission because we have nothing to track you with.
- We do not access your location in the background, your microphone, or your contacts.
Who else sees your data
Only the companies we need to run the service, and only the part they need. Each is bound to use it for us and not for themselves.
- Paystack
- Takes customer payments and sends your payouts. Receives the payment and bank details required for the transfer.
- Termii
- Delivers your sign-in code by SMS. Receives your phone number.
- Clerk
- Handles sign-in for our staff apps. Receives the sign-in identity for those accounts.
- DigitalOcean
- Hosts the BigPlug service and stores uploaded photos.
- Expo
- Delivers push notifications to your device.
- Resend
- Sends order and receipt emails.
- Vercel
- Hosts this website and the reseller storefronts.
We also share data where the law requires it, or where it is necessary to investigate fraud or abuse.
What buyers see
A customer buying from a reseller’s store sees one price and the store they bought from. They do not see the supplier behind the product, and suppliers do not see the customer’s details beyond what is needed to fulfil and deliver the order.
How long we keep it
Your account data stays while your account is open. Records of completed orders and payouts are kept afterwards because Nigerian tax and accounting rules require us to keep them, and because they are the proof of money we paid you.
When you delete your account we remove your profile, your store and listings, your messages, and your uploaded photos. We keep a minimal record that the account existed and was deleted, so a deleted account cannot be silently recreated.
Your rights
Under the Nigeria Data Protection Act you can ask us to show you the data we hold about you, correct it, delete it, or stop a particular use. Most of it you can do yourself in the app under Profile. For anything else, write to privacy@mybigplug.com and we will respond within 30 days.
You can delete your account from inside the app, or request it at mybigplug.com/delete-account. If money is still owed to you or an order is still in progress, we will tell you what needs to settle first rather than delete records that prove you are owed.
Security
Traffic between the apps and BigPlug is encrypted in transit. Sign-in tokens are held in your device’s secure storage. Access to production data is limited to staff who need it. No system is perfect, so if we ever discover a breach affecting you we will tell you and the Nigeria Data Protection Commission as the law requires.
Children
BigPlug is for people running a business and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has an account, write to us and we will remove it.
Changes
If we change this policy we will update the date at the top, and tell you in the app when the change actually affects you.
Contact
privacy@mybigplug.com for privacy and data requests. support@mybigplug.com for everything else. We are in Lagos, Nigeria.