Data Retention Policy

1. Overview

nibango retains personal data only for as long as necessary to provide our services, comply with legal obligations, and protect our legitimate interests. This policy describes how long we keep different types of data and what happens when data is no longer needed.

2. Active Account Data

While your account is active, we retain:

• Profile information (username, email, avatar, location) — retained until you update or delete your account.
• Product listings — retained while the listing is active. Listings stay active for 30 days and can be renewed. Expired listings are kept for 30 days; after that their photos and details are permanently deleted; only the title is kept, so completed transaction records can still show it.
• Chat messages — retained while the accounts in the conversation exist. If a user deletes their account, the other person keeps the conversation; after 30 days the deleted user's name and photo in it are replaced by an anonymous identifier, and one year after the deletion that user's messages and the conversations they took part in are permanently deleted.
• Transaction and rating history — retained to maintain marketplace trust and integrity. For deleted accounts they are kept in anonymized form until the permanent deletion described in section 3.
• Favorites — retained until you remove them or the product is deleted.

3. Account Deletion

When you delete your account:

• Immediate — Your account is deactivated (soft delete). You can no longer log in or be found by other users.
• 30-day grace period — During this time, you can contact support to reactivate your account.
• After 30 days — All personal identifying information (PII) is permanently anonymized. This includes your email, username, avatar, location, phone number, date of birth, and gender.
• Preserved data — Transaction records, ratings and conversations are kept in anonymized form for marketplace integrity until the permanent deletion below.
• After one year — The anonymized account is permanently deleted together with the data still linked to it: messages and the conversations it took part in, listings, bids, offers, ratings, favorites and reports.

4. Automated Cleanup

• Unverified accounts — Accounts that have not verified their email are automatically deleted: after 24 hours if they have no listings or conversations, otherwise after 7 days.
• Expired product listings — Listings that have expired and not been renewed are purged after 30 days: their photos and details are permanently deleted.
• PII anonymization — A daily automated process anonymizes personal data for accounts deleted more than 30 days ago.
• Permanent deletion — A daily automated process permanently deletes accounts deleted more than one year ago, with the data still linked to them.

5. Legal Obligations

We may retain certain data for longer periods when required by applicable law, such as tax regulations, fraud prevention, or regulatory compliance. In such cases, access is restricted to authorized personnel only.

6. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access — Request a copy of your personal data via the app or API.
• Rectification — Update incorrect or incomplete data through your profile settings.
• Erasure — Delete your account, which triggers the process described in section 3.
• Data portability — Export your data in a machine-readable format.

To exercise these rights, contact us at privacy@nibango.com.

7. Contact

For questions about this policy or data retention practices, contact us at privacy@nibango.com.