Scope & controller
This policy applies to the Mbopy website, mobile application, merchant dashboard, support channels, and services that link to it. It covers buyers, merchants, team members, brand contacts, visitors, and people who contact Mbopy.
The Mbopy entity identified during account creation, checkout, or a commercial agreement is responsible for the relevant processing. Contact [email protected] for the entity and privacy contact applicable to your market.
Information we collect
We collect information you provide when creating an account, verifying a merchant, building a store, listing a product, ordering, arranging delivery, subscribing, buying a Boost, or contacting support.
We also receive technical and transaction information needed to operate and secure the service.
- Name, email, phone, addresses, language, and credentials
- Identity, business, store, tax, payout, and verification details
- Listings, orders, payments, delivery events, confirmation records, and messages
- Subscription, Boost, campaign, invoice, and support records
- IP address, device, browser, app version, logs, cookies, and approximate location
How information is used
Mbopy uses information to create and secure accounts, verify merchants, provide storefronts and recommendations, process orders and payments, coordinate delivery, administer plans and Boosts, provide support, and enforce policies.
We also use information to prevent fraud, investigate disputes, measure reliability, improve products, comply with accounting and legal duties, and communicate service or security updates. Optional marketing is controlled separately where required.
Reasons for processing
Depending on applicable law, processing may be necessary to perform a contract, take requested pre-contract steps, comply with law, protect legitimate interests such as fraud prevention and service improvement, protect vital interests, or rely on consent.
Where consent is the basis, it can be withdrawn for future processing. Withdrawal does not affect processing already completed or information that must be retained under another lawful basis.
Payments & verification providers
Payment providers process authorization, payment status, settlement, refund, and fraud signals according to their own notices and agreements. Mbopy avoids collecting unnecessary complete payment credentials.
Identity or business verification providers may process documents, images, extracted details, and risk results. Access is limited to teams and providers that need the information for verification, compliance, security, or support.
Retention
Information is retained for the time needed to provide the service and for legitimate security, dispute, tax, accounting, fraud prevention, and legal purposes. The period varies by data type, market, account status, and transaction.
When information is no longer needed, it is deleted, anonymized, or securely isolated, subject to backup cycles and legal holds. Closing an account does not automatically remove records that must be retained.
Security
Mbopy uses access controls, encryption in transit, monitoring, logging, provider review, verification, and operational safeguards designed to reduce unauthorized access, alteration, loss, or disclosure.
No online service is risk-free. Protect credentials and report suspected compromise promptly. Mbopy may notify affected people and authorities when a qualifying incident occurs under applicable law.
Your choices & rights
Depending on your country, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and may complain to a competent data protection authority.
Send a request from the account email to [email protected] and describe the requested action. Mbopy may verify identity and may retain or refuse information where law, fraud prevention, another person’s rights, or transaction integrity requires it.
- Manage language and communication preferences
- Control non-essential cookies where available
- Update ordinary account information in product settings
- Request a privacy review through support
International processing & children
Because Mbopy supports multiple African markets and service providers, information may be processed in another country. Mbopy applies contractual, technical, and legal safeguards appropriate to the transfer and provider.
Mbopy is not intended for children who cannot lawfully enter the relevant transaction. If a child provided information without required permission, contact support for review.
Updates & contact
This policy may change as services, markets, providers, or legal obligations evolve. Material updates are published with a revised effective date and further notice where required.
For privacy questions or requests, email [email protected]. Do not send passwords, one-time codes, or complete payment credentials.
Our team can help you understand Mbopy and resolve an account, order, or policy question.