Privacy Policy

1. What we collect

• Vendor account info: name, email, phone, shop name, and the products/services you list.
• Payout details: bank account or mobile money details, verified through our payment processors (Section 3) before your shop can go live.
• Buyer checkout info: name, phone, email, and delivery address, collected to complete and fulfil an order.
• Usage data: pages visited, orders placed, and general device or browser info, used to keep the platform working and improve it.
• Product photos a vendor uploads, used to display their shop and, if they choose, to generate marketing content (Section 4).

2. What we don't do

We don't sell personal data to advertisers or data brokers. We don't store full card numbers. Card payments are handled directly by our payment processors, who are PCI-compliant.

3. Who we share it with

• Payment processors:Monnify, Flutterwave, and Stripe receive what's needed to process a payment or payout (name, email, amount, bank or card details entered directly with them).
• AI providers: product names, descriptions, and photos may be sent to OpenAI and fal.ai to generate catalog copy, marketing posts, and ad videos when a vendor uses those features.
• Social platforms:if a vendor connects Instagram, Facebook, or TikTok, generated content is posted to those accounts using the access the vendor explicitly grants during connection. Bifixit only posts on a vendor's behalf; it doesn't read or use their broader account data.
• We share data with law enforcement only when legally required to.

4. AI-generated content

When a vendor generates marketing content or ad videos, the relevant product photo and details are sent to the AI provider (OpenAI for text and images, fal.ai for video) solely to produce that content, not for their own model training, to the extent their terms allow us to restrict that.

5. How long we keep it

Account and order data is kept for as long as the account is active, plus a reasonable period after for tax, dispute, and accounting purposes. A vendor can ask us to delete their account data by emailing us, subject to records we're legally required to retain.

6. Your choices

Vendors can update or remove their shop and product info at any time from the dashboard, and can disconnect a social account whenever they want. Buyers can contact the vendor they bought from, or email us, to ask what information we hold about them.

7. Your rights (GDPR & beyond)

If you're in the UK, EU, or EEA, data protection law gives you specific rights over your personal data, and we honour these for every user regardless of location. You can ask us to:

• Give you a copy of the personal data we hold about you (access).
• Correct inaccurate or incomplete data (rectification).
• Delete your data, subject to records we're legally required to keep (erasure).
• Provide your data in a portable format, or restrict or object to certain processing.

We rely on your consent, the need to perform our contract with you (running your shop, processing an order), and our legitimate business interests as the legal basis for processing. We don't use tracking or advertising cookies. The cookies we do set are functional: keeping you logged in, keeping your cart working, bfx_locale(remembers whether you've manually switched between the Nigeria and global versions of this site, so we don't keep guessing from your location), and bx_currency (the same preference, for prices shown elsewhere on the site). To exercise any of these rights, email us at the address below. EU/EEA users also have the right to lodge a complaint with their local data protection supervisory authority.

8. Contact

Questions about this policy or a data request: hello@bifixit.com.