Your information, handled responsibly.

Information we collect

We collect account and contact details, saved delivery and farm locations, profile and produce images, order and fulfilment records, support messages, ratings, notification preferences, device push tokens, and technical security logs. When you permit location access, coordinates are used to rank nearby produce, quote delivery, and provide farm directions.

Payments and receipts

Our payment provider processes card, bank, and transfer payments, and is named on the payment page before you pay. HarvestNearU does not store card numbers or security codes. A farm's payout bank account number is stored, encrypted, because the provider that sends the money requires it with every transfer; only the last four digits are ever shown, and the key that decrypts it is held outside the database. If manual payments are enabled, submitted receipts are stored only while needed for review and are removed after confirmation according to the service workflow.

How information is used

• Operate accounts, carts, orders, delivery, pickup, refunds, ratings, payouts, and support.
• Verify farms, prevent fraud, secure sessions, and maintain audit records.
• Send essential service email and push notifications, plus optional marketing selected in email preferences.
• Measure reliability and improve marketplace performance and accessibility.

Decisions made by software

Parts of the service run without a person looking at each case: search ranking, delivery quoting and route estimates, fraud and abuse checks, holds placed on a payout while an order is disputed, and the Help centre assistant.

Where an automated check affects your account or your money — a suspension, a payout hold, a declined verification — you can ask for a person to look at it again from Your rights over your information in your profile. The same place is where you ask us to correct information, to restrict a use of it, or to object to one. Each request is recorded with the date it is due, a member of our team reviews it, and we tell you what was decided within one month.

The Help centre assistant answers from our published guidance. What you type into it is sent to Cloudflare Workers AI to produce the answer and is processed only for that purpose. Do not put card numbers, passwords, identity numbers, or anything else confidential into it. Its answers can be wrong, they are not advice, and where one conflicts with our terms or a decision our support team has made, the terms and the decision are what apply.

Service providers

Information is processed by providers needed to operate the service, including Vercel for hosting, Vercel Blob for images and documents, Vercel Speed Insights for page performance measurement, Neon for the database, Flutterwave for payments and farm payouts, Expo for mobile builds and push delivery, Resend for email, Cloudflare Workers AI for the Help centre assistant. Each provider receives only the information required for its function.

Distances and delivery times are worked out on our own routing server, not by an outside mapping service, so your location is not sent anywhere to quote a delivery or to rank produce near you. The map and directions links open OpenStreetMap in your browser. Following one sends that farm or pickup point's coordinates to OpenStreetMap, because they are in the link; it does not send yours.

If you type an address instead of sharing your location, we look that address up with OpenStreetMap's address search (Nominatim) to place it on the map. Only the street, town and state you typed are sent; your name, account and contact details are not. If you share your location instead, nothing is sent to OpenStreetMap.

Retention and deletion

Profile information is kept while an account is active. Users can delete an account from Privacy & security in the mobile app or confirm deletion on our deletion page. Deletion removes or anonymizes account credentials, contact details, saved locations, images, preferences, notifications, and public farm data. Limited transaction, refund, payout, fraud-prevention, and audit records may be retained where required for legal, accounting, security, or dispute-resolution purposes.

Your choices

You can update your profile and saved location, control optional email categories, deny device location access, remove saved favourites, and request account deletion. Essential order, payment, refund, security, and support communications cannot be disabled while the related service is active.

Download a copy of my information

Security and contact

We use encrypted network connections, password hashing, restricted administrative access, session expiry, and audit logs. No online system is completely risk-free. Privacy and security concerns can be submitted through the Help centre.

Why we are allowed to use it

• To perform our contract with you — running your account, cart, orders, fulfilment, refunds, ratings, and payouts.
• To meet legal obligations — verifying who sells on the marketplace, keeping financial and tax records, and responding to lawful requests.
• For our legitimate interests — keeping the service secure, preventing fraud, and measuring how the site is used, balanced against your privacy.
• With your consent — optional marketing email, and access to your device location. You can withdraw either at any time without affecting anything done beforehand.

How long we keep it

• Account information — while the account is open, then removed or anonymised on deletion.
• Identity documents supplied for farm verification — destroyed 90 days after the decision. The decision, and the record that evidence was checked, is kept.
• Identity numbers — never stored in readable form. We keep a one-way hash and the last four digits only.
• Order, payment, refund, and payout records — six years, to meet accounting, tax, and dispute obligations.
• Website traffic records — twelve months.
• Page performance timings — held by Vercel for as long as their service retains them, and never linked to an account.
• Security and audit logs — retained to investigate fraud and to evidence administrative decisions.

Your rights under the Nigeria Data Protection Act

You may ask us for a copy of the information we hold about you, correct it if it is wrong, ask us to delete it, object to or ask us to restrict a particular use, withdraw consent you have given, and receive your information in a portable form. Download a copy at any time from Privacy & security in the app, or from your profile on the web.

We answer requests within one month. If you believe we have handled your information wrongly, tell us first through the Help centre so we can put it right. You also have the right to complain to the Nigeria Data Protection Commission.

Measuring how the site is used

We count page views ourselves rather than using an advertising network, and we do not track you across other websites or sell information to anyone. To count a reader without identifying them, the network address and browser description are combined and hashed with a value that changes every day. The result cannot be reversed, and the same reader cannot be linked from one day to the next. We store no advertising cookies.

We also measure how quickly pages load and respond, using Vercel Speed Insights. It records timings — how long the largest part of a page took to appear, how quickly the page answered a tap, how much the layout shifted — together with the page address, whether the device is a phone or a computer, and the country the request came from. It sets no cookies, it does not identify you, and it cannot follow you to another website. We use it to find pages that are slow on a mobile connection, which is how most of our customers reach us.

Where your information is processed

Some providers we rely on operate outside Nigeria, including hosting, database, email, and mobile delivery services. Where information leaves Nigeria we rely on the provider's contractual data-protection commitments and use only the information each provider needs to perform its function.

Children

HarvestNearU is not intended for people under 18 and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

If something goes wrong

We keep records of security incidents. Where a breach is likely to result in serious risk to you, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it and tell you without undue delay.

Changes to this policy

We update this policy as the service changes or the law requires. The version is shown at the top of this page and is recorded against your account when you accept it, so what you agreed to can be established from that record rather than from whatever the page says today. Where a change materially affects how we use your information we will tell you in the product and ask you to accept the new version; smaller corrections are published here and take effect when published.

Who is responsible

HarvestNearU is a trading name of FARMTECH LTD, a private company limited by shares registered in Nigeria under RC 9839166, with its registered office at 2 Akindoyin Arile Street, Ife-Central, Osun State, Nigeria. That company is the data controller for the information described here. Privacy questions, requests about your information, and complaints reach the person responsible for data protection at privacy@harvestnearu.com, or through the Help centre.

We answer requests within one month. If you are not satisfied with how we have handled your information you may complain to the Nigeria Data Protection Commission, and nothing here requires you to come to us first.