Legal

Privacy Policy

How Travelpayy collects, uses, and protects your personal information.

Effective Date: May 25, 2026  |  Last Updated: May 25, 2026

Welcome to Travelpayy ("we", "us", "our"). Travelpayy is a peer-to-peer (P2P) logistics platform that connects individuals who need to send parcels with travelers heading to the same destination. We are committed to protecting the privacy and personal data of every person who uses our platform.

This Privacy Policy explains what personal information we collect when you use the Travelpayy website at www.travelpayy.com, why we collect it, how we use it, and the choices you have regarding your information.

By creating an account or using Travelpayy, you agree to the collection and use of your information as described in this Privacy Policy.

We collect information in the following ways:

2.1 Information you provide directly

  • Account registration: Full name, email address, phone number, password (hashed — never stored in plain text), and user type (sender or traveler).
  • Profile details: Profile photo, bio, and other optional information you choose to add.
  • Identity verification: Government-issued ID type and number, a photo of your ID document, and a selfie photo holding your ID. This is required only for travelers seeking the Verified Traveler status.
  • Delivery requests: Package description, declared value, pickup location, destination, preferred dates, package weight, size, and category.
  • Travel listings: Departure location, destination, travel date, available carrying capacity, price per kg, and transport mode.
  • Messages: Content of in-app messages exchanged between senders and travelers.
  • Payment information: Bank name, account number, and account name for withdrawal purposes.

2.2 Information collected automatically

  • Browser type, IP address, device type, and pages visited.
  • Session data and cookies used to keep you logged in and maintain platform security.
  • Interaction events tracked via Facebook Meta Pixel (page views, button clicks, registration events).

2.3 Information from third parties

  • Payment verification data from Paystack (payment reference, transaction amount, and status — Travelpayy does not store your card details).

We use the information we collect to:

  • Create and manage your Travelpayy account.
  • Connect senders with travelers on matching routes.
  • Process fund deposits and withdrawal requests through our escrow wallet system.
  • Verify traveler identities and display verified status badges on profiles.
  • Send transactional notifications (delivery accepted, funds received, withdrawal processed, etc.).
  • Enable in-app messaging between senders and travelers.
  • Monitor platform safety, detect fraud, and enforce our Terms of Service.
  • Improve platform features and user experience through aggregated usage analytics.
  • Respond to support inquiries and resolve disputes.
  • Comply with applicable Nigerian laws and cooperate with law enforcement where required.

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following circumstances:

  • With other users: Your public profile (name, rating, verification status, and profile photo) is visible to other users when you list a trip or post a delivery request. Your contact details are shared only when a delivery agreement is confirmed.
  • With payment processors: We share necessary transaction data with Paystack to process deposits and verify payments.
  • With law enforcement: We will disclose account and transaction data to Nigerian law enforcement authorities if legally required, or when we believe in good faith that disclosure is necessary to prevent fraud, illegal activity, or harm to any person.
  • With service providers: We may share limited data with trusted technology service providers (e.g. hosting, email delivery) under strict confidentiality agreements.
  • Business transfers: In the event of a merger, acquisition, or sale of all or part of our assets, user data may be transferred as part of that transaction. You will be notified via email.

Travelpayy operates an escrow wallet system. Senders fund their wallets before a delivery is accepted. Funds are held by the platform and only released to the traveler after the sender confirms successful delivery.

  • Card payments are processed exclusively through Paystack. Travelpayy does not store your card number, CVV, or PIN.
  • Withdrawal requests require you to provide your bank account details. This information is stored securely and used solely for the purpose of processing your withdrawal.
  • All wallet transactions are logged and retained for auditing and dispute resolution purposes.

To become a Verified Traveler, users must submit a government-issued ID and a selfie photo. This information is used exclusively to:

  • Confirm the identity of travelers on the platform.
  • Reduce the risk of fraud and create a layer of accountability.
  • Display a Verified Traveler badge on your public profile.

Identity documents are stored securely and reviewed only by authorised Travelpayy administrators. They are never shared with other users or third parties, except as required by law.

Verification is required for travelers only. Senders do not need to submit identity documents to post delivery requests.

We use cookies and similar technologies to:

  • Session cookies: Keep you logged in during your visit.
  • Preference cookies: Remember settings such as dark mode preference.
  • Analytics and advertising cookies: We use the Facebook Meta Pixel to measure the effectiveness of our marketing campaigns and understand how users interact with the platform. This may involve the collection of anonymised data about your browsing behaviour.

You can control cookie preferences through your browser settings. Disabling cookies may affect certain platform features, including the ability to stay logged in.

Travelpayy integrates with the following third-party services, each governed by their own privacy policies:

We are not responsible for the privacy practices of these third-party services. We encourage you to review their respective policies.

We take the security of your personal data seriously and implement the following measures:

  • All passwords are hashed using bcrypt (PHP's PASSWORD_DEFAULT) — they are never stored in plain text.
  • All forms are protected with CSRF tokens to prevent cross-site request forgery.
  • Sensitive pages are accessible only to authenticated users.
  • HTTPS encryption is enforced across the entire platform.
  • Administrator access is restricted and requires separate authentication.
  • Security events (login attempts, verification submissions, withdrawals) are logged for audit purposes.

While we implement strong security measures, no system is completely immune to risk. We encourage you to use a strong, unique password and to notify us immediately if you suspect any unauthorised access to your account.

We retain your personal data for as long as your account is active or as necessary to provide the services you have requested. Specifically:

  • Account data is retained for the duration of your account and for a reasonable period afterwards for legal and compliance purposes.
  • Transaction records (wallet deposits, withdrawals, delivery agreements) are retained for a minimum of 5 years in accordance with Nigerian financial regulations.
  • Identity verification documents are retained as long as your account is active. You may request deletion by contacting support.
  • Messages are retained to support dispute resolution and may be reviewed by administrators in the event of a reported incident.
  • Password reset tokens expire within a short time window and are deleted upon use.

You have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Update inaccurate or incomplete information via your account settings.
  • Deletion: Request deletion of your account and associated data, subject to retention requirements for legal and financial records.
  • Withdrawal of consent: Opt out of non-essential communications (e.g. marketing emails) at any time.
  • Portability: Request an export of your data in a machine-readable format.

To exercise any of these rights, contact us at support@travelpayy.com. We will respond within 30 days.

Travelpayy is intended for users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has registered on the platform, please contact us immediately and we will delete the account.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page.
  • Notify you by email or via an in-app notification.

Continued use of Travelpayy after changes are posted constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:

On this page
Terms of Service Help Center