1. Who is responsible for your data?
Kampivo is currently in private beta and is operated by the Kampivo project team in Nigeria. The registered operating-entity details will be added to this policy when incorporation is completed. For privacy questions and requests, contact support@campuslink.name.ng.
2. Personal data we collect
The data depends on how you use Kampivo.
Account and profile data
- Name, email address, phone number, account type and authentication information.
- Institution, course/level and other campus-profile information supplied by a student.
- Business name, description, contact details, service areas, availability and listing information supplied by a vendor.
Verification and trust data
- Student or vendor verification evidence, which may include school ID, matriculation or portal evidence, government/business documents or other evidence requested for a verification decision.
- Verification status, review notes, campus-approval status and audit records.
Marketplace and safety data
- Saves, reviews, ratings, contact events, reports, complaints and moderation records.
- Products, services, portfolio media and pricing information.
Technical and billing data
- Security/session information, device/browser information and operational logs used to protect the service.
- Vendor subscription/payment references and status. Kampivo does not store full card details; payment processing is handled by the payment provider.
3. Why we process personal data
We process data only where there is a lawful basis and for purposes connected to the service. Depending on the activity, those bases may include performance of our agreement with you, consent, legitimate interests such as platform security and fraud prevention, or compliance with legal obligations.
- To create and secure accounts and route users to the correct Student, Vendor or Admin experience.
- To verify campus membership or vendor identity and determine campus eligibility.
- To operate campus discovery, search, reviews, saves and contact features.
- To investigate reports, prevent abuse and keep an audit trail of safety decisions.
- To administer Vendor plans, billing and entitlements.
- To send account, verification, security and service communications.
- To improve reliability, diagnose errors and protect the service from misuse.
4. Verification documents
Verification evidence is used only for identity, campus eligibility, fraud prevention, safety, appeals and related legal/compliance purposes. Verification documents are kept in a private storage area and are not displayed publicly. Access is restricted to the account owner and authorised administrators with a legitimate verification or safety role.
Paying for a Kampivo plan does not buy verification, campus approval or a trust badge.
5. Service providers, processors and international transfers
Kampivo uses specialised service providers to run the platform. These may include cloud hosting, database/authentication, transactional email and payment providers. We disclose only what is reasonably necessary for the relevant service.
| Provider category | Purpose | Typical data |
|---|---|---|
| Supabase | Database, authentication and private file storage | Accounts, profiles, verification and marketplace records |
| Vercel | Web hosting, application delivery and runtime | Web requests and application traffic |
| Resend / email infrastructure | Transactional and administrative email delivery | Email address, recipient name and message content |
| Paystack | Vendor subscription payment processing | Billing email, payment/subscription references and payment status |
Some providers may process data outside Nigeria. Where a cross-border transfer occurs, Kampivo will use the safeguards required by applicable Nigerian data-protection law and will review the relevant provider arrangements.
6. How long we keep data
We keep personal data only for as long as it is reasonably needed for the purpose for which it was collected, for account administration, safety, dispute handling, fraud prevention or legal obligations. Our operational retention schedule is reviewed as the service grows.
- Account/profile data: while the account is active and for a limited period after closure where needed for recovery, disputes, fraud prevention or legal obligations.
- Verification evidence: only while reasonably needed for verification, appeals, fraud/safety review or a legal hold; evidence is scheduled for deletion when those purposes expire while the verification decision and minimal audit record may be retained.
- Reports and safety records: for the period needed to investigate, resolve and defend safety decisions.
- Billing/accounting records: for the period required by applicable tax, accounting and legal obligations.
- Operational/security logs: for a limited security and troubleshooting period unless a specific incident requires longer preservation.
7. Your data-protection rights
Subject to the Nigeria Data Protection Act and applicable limitations, you may have rights to be informed, access your data, request correction, object to or restrict certain processing, request portability, request erasure, withdraw consent where consent is the basis, request human intervention in qualifying automated decisions, and complain to the Nigeria Data Protection Commission.
We may ask for information reasonably necessary to confirm your identity before acting on a request, especially where disclosure or deletion could affect another person.
8. Account deletion and data-subject requests
To request access, correction, deletion, restriction, portability, objection or account closure, email support@campuslink.name.ng with the subject Kampivo Privacy Request. Tell us the email address on your account and the request you want us to process. Do not email identity documents unless we specifically ask for verification through an appropriate channel.
We aim to acknowledge requests promptly and respond within the period required by applicable law. Complex requests may require additional verification or time permitted by law. Account deletion does not require us to erase information that must lawfully be retained for unresolved disputes, fraud prevention, safety, tax/accounting or other legal obligations.
9. Security
Kampivo uses technical and organisational controls intended to protect personal data, including access controls, role-scoped administration, private verification-document storage, authentication controls, row-level data access rules and security logging. No internet service can promise absolute security, so we continuously review controls as the platform changes.
10. Personal-data incidents
Kampivo maintains a breach-response process to identify, contain, assess, document and remediate suspected personal-data incidents. Where an incident is likely to create the level of risk requiring regulatory notification, we will notify the Nigeria Data Protection Commission within the applicable statutory timeframe and communicate with affected people where required.
11. Age policy
Kampivo's current launch is for people aged 18 years and above. We do not intentionally onboard users we know to be under 18 during this launch phase. If we later support minors, we will introduce the additional age-verification, consent and safeguarding process required by law before doing so.
12. Contact and policy updates
Privacy and data-subject requests: support@campuslink.name.ng. We may update this policy as Kampivo's company registration, domain, service providers, features or legal obligations change. Material changes will be communicated through the service or another appropriate channel.