Privacy policy

What we collect

• Account: name, handle, university email, university, department, year.
• Verification: NID or birth registration document, student ID card, and an academic document. We store only the last four digits plus a salted hash of the ID number.
• Marketplace activity: listings, requests, bids, orders, messages, files, reviews.
• Money: ledger entries, payout destinations stored masked.

Verification documents

Documents go into a private bucket, are never publicly addressable, and are opened only through short-lived signed links issued to reviewers. Every admin view is logged. On approval we set a purge date — the document images are deleted after 90 days while the approval record remains.

Order messages

Only the two participants can read an order thread. An administrator can read it only while a dispute is open on that order, and that access is written to the audit log.

What is public

Your handle, name, university, year, verified stamp, verified course badges, ratings, completed order count and published reviews. Never your email, documents, balances, suspension notes or strike count.

Retention

• Verification images: 90 days after approval.
• Ledger and order records: retained for accounting and dispute history.
• Messages and delivered files: retained while the order or dispute window is live.

Your controls

You can edit your profile, download your order history, and request account deletion. We cannot delete ledger rows tied to settled money, but we can anonymise your public profile.