Privacy Policy

Effective Date: May 2026 · Platform: Tarra (Operated by Tarra Digital Limited)

Tarra Digital Limited ("Tarra," "We," "Our") is committed to protecting the privacy and data security of our platform users. This Privacy Policy outlines how we collect, utilize, and safeguard information within our campus-focused e-commerce marketplace and directory infrastructure.

1. Information We Collect

To maintain a verified and secure environment for campus commerce, we collect the following essential data categories:

  • Account & Profile Data: Full legal name, verified institutional student email address (@student.oauife.edu.ng), phone number, and campus/hostel location. Access credentials are cryptographically secured using industry-standard encryption and are never stored in plaintext.
  • Transaction & Ledger Data: Pending vendor balances, internal transaction history, and verified bank details necessary to facilitate direct merchant settlements. We do not store payment card details; all debit card and bank transfer processing is securely routed through our licensed third-party payment gateway infrastructure.
  • Technical Data: Standard device identifiers necessary for routing push notifications, device operating systems, and platform activity logs (search queries, transaction category selections, and engagement metrics) utilized strictly to optimize platform performance.
  • Fulfillment Data: Campus delivery coordinates, hostel blocks, and contact phone numbers required for physical order completion and delivery logistics.

2. How We Use Your Data

We utilize collected information strictly to manage platform operations, enforce safety standards, and secure the marketplace network:

  • Order Verification: To process and secure peer-to-peer retail transactions via our standard Buyer Protection Protocol, ensuring transaction completion before final merchant settlement.
  • Identity Authentication: To verify vendor identity via university email authentication and systematically manage account status tiers and listing capabilities.
  • Network Security: To enforce our Terms of Service, monitor platform activity for fraudulent behavior, and mitigate financial risk.
  • System Communications: To deliver critical platform updates, system notifications, and automated transactional alerts.

3. Information Sharing & Third-Party Infrastructure

Tarra does not sell, lease, or distribute personal user data to third-party advertisers. Information is shared strictly with vetted infrastructure partners and platform users to execute core marketplace logistics:

  • User-to-User Logistics: When a user books a service or purchases a physical item, their registered contact name and phone number are securely shared with the specific vendor to facilitate coordination and fulfillment.
  • Licensed Payment Frameworks: Transaction data, verification parameters, and settlement instructions are securely transmitted to our licensed payment gateway partners to execute merchant splits and direct bank settlements.
  • Infrastructure Providers: We utilize secure cloud infrastructure services for database hosting, image delivery networks, and automated messaging protocols.

4. Device Permissions

The Tarra application will explicitly request device permissions (such as access to the Camera, Photo Library, or Push Notifications) only when strictly required to utilize a specific functional feature, such as uploading product images or receiving immediate delivery alerts.

5. Data Retention

User profile and account configurations are retained as long as the account remains active. Transactional records and ledger histories are retained for the statutory duration required under local financial compliance, anti-fraud auditing, and corporate record-keeping regulations.

6. Your Privacy Rights & Data Deletion Instructions

In strict compliance with the Nigeria Data Protection Act (NDPA) and global application distribution mandates, users maintain the sovereign right to access, rectify, or request the permanent erasure of their personal identifiers.

  • Account Deletion Protocol: To request the complete deletion of an account and all associated personal records outside of the application, users may submit an administrative request via email to contact@tarra.ng. Our compliance team will process the permanent deletion of the profile, active storefront listings, and personal identifiers within five (5) business days.
  • In-App Support: For general privacy inquiries, data access requests, or policy questions, users may contact our administrative support team directly through the in-app support center.

Official Sub-Section

Merchant & Verification Policy

Effective Date: May 2026 · Platform: Tarra (Operated by Tarra Digital Limited)

Tarra Digital Limited ("Tarra," "We," "Our") maintains a strict zero-tolerance policy toward fraudulent activity, unauthorized retail, and any form of illicit trade within our campus-focused e-commerce marketplace infrastructure. This Merchant Verification and Anti-Fraud Policy outlines the rigorous identity verification protocols and operational parameters deployed to maintain a secure trading environment for our university user base.

A. Regulatory Status & Payment Rail Infrastructure

Tarra operates strictly as a Consumer-to-Consumer (C2C) campus directory and e-commerce intermediary. We are not a bank, financial institution, or licensed remittance provider. Tarra does not directly process fiat currency, store user funds, or execute manual payouts. All transaction processing, split-fee routing, and ultimate merchant settlements are handled exclusively by our licensed, Central Bank of Nigeria (CBN) regulated payment gateway infrastructure partners. This infrastructure operates in strict compliance with the Money Laundering (Prevention and Prohibition) Act of Nigeria and all applicable federal digital commerce regulations.

B. The Verification Protocol

To eliminate anonymous trading and systematically prevent marketplace fraud, users who wish to list physical products or operate a digital storefront on Tarra must pass a mandatory verification process:

  • Institutional Authentication: Storefront access requires active verification using an official, university-issued student email address (@student.oauife.edu.ng).
  • Merchant Profile Mapping: Store owners must supply their full legal name, a verified active contact phone number, and localized campus/hostel delivery coordinates.
  • The Designated Payout Lock: To mitigate fraudulent routing and tracking risks, the first verified bank account connected by a merchant for transaction settlement is structurally bound to their platform profile. Alterations to a designated settlement bank account trigger an automatic security hold, requiring manual verification through our internal administrative support team.

C. Transaction Limits & Operational Scope

Our transaction architecture is engineered strictly to facilitate localized student retail and peer-to-peer campus trade:

  • Platform Caps: To prevent unauthorized commercial activity or high-volume velocity risks, the minimum allowable transaction value on the platform is ₦500, and individual transactions are strictly capped at a maximum ceiling of ₦2,000,000. Any transaction attempting to clear outside these parameters is automatically declined at the payment gateway level.
  • Scope Restriction: The integrated transaction settlement architecture handles payments exclusively for physical, verifiable retail items requiring hostel delivery. Independent freelance services listed within our directory are systematically excluded from the online transaction framework, eliminating unverified or subjective transaction risks.
  • Settlement Verification Window: Funds cleared via our licensed payment gateway partners are systematically routed to the merchant's destination bank account following order verification by the buyer, or automatically upon the conclusion of our standard 24-hour delivery verification window. This workflow creates an unalterable operational trail for every localized transaction.

D. Prohibited Storefront Categories & Prohibited Trades

To maintain a low-risk marketplace environment, Tarra technologically and administratively bars the listing or sale of categories highly susceptible to fraud, legal violations, or grey-market abuse. The following business types are strictly prohibited from utilizing our marketplace infrastructure:

  • Virtual assets, cryptocurrency, Forex trading, tokenized assets, or digital currency schemes.
  • Gambling, sports betting, lotteries, or games of chance.
  • Peer-to-peer lending, cash facilitation, unauthorized credit lines, or unverified financial agents.
  • Weaponry, regulated pharmaceuticals, illicit substances, adult entertainment, or any item violating the federal laws of Nigeria.

Attempting to list items within these prohibited categories will trigger an immediate, permanent platform ban and the systematic cancellation of any associated pending settlements.

E. Fraud Prevention & Account Holds

Tarra retains the absolute administrative right to intervene in any user profile or storefront transaction deemed suspicious, non-compliant, or potentially fraudulent:

  • Operational Holds: Storefront configurations will be immediately suspended and pending merchant settlements delayed if our internal anti-fraud metrics detect indicators of unauthorized debit card usage, transaction structuring, or artificial transaction generation.
  • Regulatory Cooperation: Tarra will fully cooperate with our licensed payment gateway partners and relevant Nigerian corporate regulatory or law enforcement bodies (including campus security) during active investigations by turning over identity logs, communication histories, and internal merchant transaction summaries.

F. System Record Retention

In accordance with local data protection laws, consumer safety frameworks, and financial auditing guidelines, Tarra securely archives merchant identity metadata, verified institutional email logs, historic settlement endpoints, and marketplace receipts for a minimum duration of five (5) years, regardless of subsequent account deletion or deactivation requests.

G. Policy Governance

Tarra Digital Limited reserves the right to amend this Merchant & Verification Policy at any time to remain fully aligned with updated regulatory mandates or revised operational guidelines issued by our licensed payment infrastructure providers. Continued use of our marketplace platform constitutes complete acceptance of the active policy framework.