Data Retention Policy

1. Overview

nibango retains personal data only for as long as necessary to provide our services, comply with legal obligations, and protect our legitimate interests. This policy describes how long we keep different types of data and what happens when data is no longer needed.

2. Active Account Data

While your account is active, we retain:

• Profile information (username, email, avatar, location) — retained until you update or delete your account.
• Product listings — retained while the listing is active. Expired listings are kept for 90 days, then permanently deleted.
• Chat messages — retained while both user accounts exist. Messages are deleted when either user deletes their account.
• Transaction and rating history — retained indefinitely to maintain marketplace trust and integrity.
• Favorites — retained until you remove them or the product is deleted.

3. Account Deletion

When you delete your account:

• Immediate — Your account is deactivated (soft delete). You can no longer log in or be found by other users.
• 30-day grace period — During this time, you can contact support to reactivate your account.
• After 30 days — All personal identifying information (PII) is permanently anonymized. This includes your email, username, avatar, location, phone number, date of birth, and gender.
• Preserved data — Transaction records and ratings are retained in anonymized form for marketplace integrity.

4. Automated Cleanup

• Unverified accounts — Accounts that have not verified their email within 7 days are automatically deleted.
• Expired product listings — Listings that have expired and not been renewed are removed after 90 days.
• PII anonymization — A daily automated process anonymizes personal data for accounts deleted more than 30 days ago.

5. Legal Obligations

We may retain certain data for longer periods when required by applicable law, such as tax regulations, fraud prevention, or regulatory compliance. In such cases, access is restricted to authorized personnel only.

6. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access — Request a copy of your personal data via the app or API.
• Rectification — Update incorrect or incomplete data through your profile settings.
• Erasure — Delete your account, which triggers the process described in section 3.
• Data portability — Export your data in a machine-readable format.

To exercise these rights, contact us at [email protected].

7. Contact

For questions about this policy or data retention practices, contact us at [email protected].