Privacy policy

Account information and its purpose

Email signup sends your name, email address and password to Supabase Auth to create and authenticate your account. An optional referral code is saved as account information if you provide one; referral rewards are not active. Supabase maintains the account identifier, verification status and sign-in information needed for account access.

We use this information to create your account, sign you in, verify your email, maintain your session and handle password recovery or account requests. Passwords and one-time codes are submitted to the authentication service; they are not saved as ordinary browser records.

Your profile name, phone and address, address book, wishlist and followed sellers are saved in the Supabase account database so they are available when you sign in on another device. Retired test listings and sellers are excluded from saved-item responses. You can explicitly import your own older browser-saved addresses after confirming ownership; imports are claimed to one account.

Seller applications store the contact name, business name, verified account email, phone, selected categories, location and description you submit. Authorized EasyGrab administrators review applications and can approve or reject seller access. Decisions, review notes and notification delivery information are saved for the application process. An approved seller account is separate from any future identity-verification badge. NIN collection is not enabled by the current application.

Sign in with Google

Google sign-in is optional. It requests only the openid, email and profile permissions. When you choose it, Google provides Supabase Auth with your Google account identifier, email address and its verification status, and basic profile information such as your name and profile picture when available. This information is stored with your account identity to authenticate you and display your account. Google does not share your Google password with EasyGrab.

We use Google information for these account features and related account or security requests. We do not request Gmail messages, Drive files or contacts. We do not sell Google account information, use it for advertising, or send it to an AI service or use it to train AI models. Google sign-in information is not published in seller profiles or shared with marketplace sellers by the current application.

This use of Google information is governed by the Google API Services User Data Policy, including its Limited Use requirements where applicable. Our use and sharing of Google information is limited to the account purposes described here.

Services that process information

Supabase provides authentication and stores account identities, session information, saved account data, seller applications and inbox notifications. Brevo delivers verification, recovery and seller-decision emails and processes the recipient address, message content and delivery information. Vercel hosts the website and its server requests. Google processes sign-in requests when you choose Google sign-in. These services can process connection information, including IP addresses, browser information and operational or security logs, when providing their services.

Provider information is available in the privacy notices for Supabase, Brevo, Vercel and Google. Provider processing and operational records are also subject to their service arrangements. Loading external images or opening map links can involve other providers.

Session cookies and browser storage

Authentication cookies keep your session available to the browser and website server so you can stay signed in and refresh account access. Signing out ends this browser’s EasyGrab session. Blocking or clearing authentication cookies can prevent sign-in or require you to sign in again.

The cart is saved in this browser so visitors can keep items between visits. Items that are no longer listed are excluded. Account-linked wishlist items, followed sellers, profile details and addresses are stored separately in the account database.

Viewing history and its browsing preference are saved on this device and separated by signed-in account. The app hides the previous account’s content when you switch accounts or sign out. Signing out does not erase stored browser records. Retired test orders, reviews, vouchers and support drafts are no longer read by the active website. Browser site-data controls can remove these older records.

The guided support assistant uses prepared answers. Its conversations are not sent to an AI service or a live support team. Emailing our public support address sends your message through your email provider to EasyGrab. The website does not currently collect payments or accept orders.

Retention and removal

Account identity, saved account information and application records remain while the account exists or until the relevant records are removed. Signing out or removing the Google connection does not delete your EasyGrab account. There is currently no automatic account deletion when you stop using the website and no in-app account-deletion button. Account removal is handled manually after an ownership check.

Browser records remain until you remove them through the relevant page or clear site data. Providers may retain operational, email-delivery or security records under their own arrangements. This policy does not promise immediate removal of every provider log, backup or previously issued session token when an account is removed.

Your choices and account requests

You can remove saved addresses and available wishlist items on their respective pages. Account settings can disable recently viewed history and clear it. Browser site-data controls can remove local EasyGrab records, including saved carts and retired test records; clearing site data does not delete the account stored by Supabase.

For questions about your information, or to request access, correction or deletion of account information held for EasyGrab, contact easygrab.ng@gmail.com. Explain the request and the email address associated with your account. Requests are reviewed manually using the available account-management tools, and we may need information to verify that the account is yours. Never send your password, verification code or session token.

You can also review and remove EasyGrab’s Google connection in your Google Account connections. Removing it stops the Google connection; it does not automatically delete information already held with your EasyGrab account. Request account deletion separately if that is what you want.

Contact and updates

EasyGrab privacy and account enquiries: easygrab.ng@gmail.com. For personal assistance, contact this address directly.

This policy describes the current website. We will update it when account features or information handling change; the effective date identifies the version. New shopping data connections or additional Google permissions will need disclosures that reflect those features.