Privacy Policy

Anyone who visits AgriStock, creates an account, completes KYC, funds a wallet, invests, withdraws, or contacts support.

• Identity & contact: name, email, phone, Telegram ID (optional), password (hashed — never stored in plain text).
• KYC / identity verification: BVN, NIN, and any supporting ID you upload. Sensitive IDs are encrypted at rest (AES-256-GCM) before storage.
• Financial activity: wallet balances, deposits, withdrawals, bank account details you submit for payouts, investment lots, and transaction history.
• Payment processor data: Paystack processes card / bank / USSD payments. We receive payment references and status — not your full card PAN.
• Usage & device: IP address, browser type, app logs, and security events needed to prevent fraud and keep the service reliable.
• Communications: OTP delivery channel outcomes, notification preferences, and support messages.

• Create and secure your account (JWT sessions, OTP verification).
• Verify identity (KYC) and meet anti-fraud / compliance obligations.
• Process deposits, investments, withdrawals, and ledger updates.
• Send transactional messages (OTP, receipts, security alerts).
• Improve product performance, detect abuse, and provide support.
• Comply with law, regulators, or valid legal requests.

We do not sell your personal data.

We process data where necessary to perform our contract with you (provide the platform), where we have a legitimate interest (security, fraud prevention, product improvement), where required by law, and — for optional marketing — with your consent.

• Paystack — payment initiation and verification.
• OTP / messaging providers — email (e.g. SendGrid), WhatsApp (e.g. Twilio), Telegram Bot API, as configured.
• KYC / identity providers — if a live BVN/NIN verification partner is enabled.
• Cloud infrastructure — hosting, database, and cache providers that process data under contract.
• Regulators / law enforcement — when legally required.

We use industry-standard controls including HTTPS in production, password hashing, JWT access/refresh tokens, encryption of sensitive identity fields, rate limiting, and least-privilege access to production systems. No method of transmission or storage is 100% secure; report suspected incidents to privacy@agristock.app.

We keep account and transaction records for as long as your account is active and for a further period required for legal, accounting, dispute, or regulatory purposes. You may request deletion subject to those obligations.

Subject to applicable law, you may request to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete data (where not required for compliance)
• Object to or restrict certain processing
• Withdraw consent for optional communications

Contact privacy@agristock.app. You may also lodge a complaint with the relevant Nigerian data-protection authority.

AgriStock is not directed at persons under 18. We do not knowingly collect data from minors.

If we use processors outside Nigeria, we take steps to ensure appropriate safeguards consistent with applicable law.

We may update this Policy. The "Last updated" date will change, and material updates may be notified in-app or by email.

Privacy questions: privacy@agristock.app
Related: Terms of Service