Privacy Policy

We may collect:

• Account data — name, email, username, password (hashed), campus/institution, account intent (buyer/vendor/both), referral codes
• Business data — store name, slug, description, industry, logo, phone, email, and related storefront settings
• Order & checkout data — customer name, phone, email, delivery/pickup venue, notes, service addresses, order items, amounts, and fulfillment status
• Payment data — payment references, status, amounts, fees, and provider responses. Card details are processed by our payment provider (Duplo Atlas); we do not store full card numbers
• Communications — support messages, waitlist submissions, verification codes, and transactional emails
• Usage & device data — IP address, browser type, pages visited, session cookies, and similar diagnostics needed to run and secure the Platform

We use personal data to:

• Create and manage accounts, storefronts, and buyer hubs
• Process orders, payments, escrow, refunds, and withdrawals
• Send order updates, PINs, readiness notices, and security codes
• Show purchase history and order activity in your account
• Provide CRM, analytics, referrals, leaderboards, and support
• Prevent fraud, enforce our Terms, and keep the Platform secure
• Improve features and communicate product or campus launch updates
• Comply with legal and payment-partner requirements

We process data where needed to:

• Perform a contract with you (orders, accounts, payouts)
• Pursue legitimate interests (security, product improvement, abuse prevention)
• Meet legal obligations
• Obtain consent where required (e.g. certain marketing messages)

We may share information with:

• Other users as needed for orders — e.g. vendors receive buyer contact/fulfillment details; buyers may see vendor phone/email to arrange pickup or delivery
• Payment processors — Duplo Atlas to complete payments and payouts
• Infrastructure providers — hosting, email delivery, analytics, and security vendors under appropriate safeguards
• Authorities — when required by law or to protect rights, safety, and the integrity of the Platform

We do not sell your personal information.

We use essential cookies and similar technologies for authentication sessions, security, and core Platform functionality. Disabling cookies may prevent you from signing in or completing checkout.

We retain account, order, and payment records for as long as needed to operate the Platform, resolve disputes, meet accounting/tax obligations, and comply with law. You may request deletion of your account; some records may be retained where legally required or for legitimate business purposes (for example, completed payment history).

We use reasonable technical and organizational measures to protect personal data, including hashed passwords, encrypted transport (HTTPS), and access controls. No method of transmission or storage is 100% secure; please protect your account credentials.

The Platform is directed to students and campus users. If you are under 16, you should only use Xhopizzy with appropriate parental or guardian guidance where required. We do not knowingly collect data from children under 13 for commercial exploitation.

Depending on applicable law, you may be able to:

• Access or update account profile information
• Request a copy of certain personal data we hold
• Request correction or deletion where appropriate
• Object to or restrict certain processing
• Opt out of non-essential marketing communications

To make a privacy request, message WhatsApp support at 0907 728 1077.

We primarily operate for users in Nigeria. Service providers may process data in other countries. Where we transfer data internationally, we take steps designed to protect it in line with this Policy and applicable requirements.

We may update this Privacy Policy periodically. The Effective date at the top will be revised when changes apply. Continued use of the Platform after an update means you acknowledge the revised Policy.

Privacy questions: WhatsApp 0907 728 1077 or our Contact page. Also see our Terms of Service.