Privacy Policy

Waybl ("Waybl", "we", "us") operates the Waybl marketplace, which connects people sending items with travellers who have spare baggage allowance. We are the controller of the personal data described in this policy.

This policy applies to everyone who uses our website, apps and services, or who joins our waitlist.

Information you give us:

• Account details: your name, email address, phone number, password (stored in hashed form) and, if you choose to provide them, your gender, pronouns and country.
• Verification details: images of your government-issued ID, your profile photo, the details on your document such as name, date of birth and document number, and the outcome of our review.
• Trip and booking details: routes, travel dates, flight tickets and booking references, available capacity, item declarations, weights, values, and receiver details.
• Communications: messages you exchange with other users in Waybl chat, and anything you send to our support team, including dispute evidence.
• Waitlist details: your email address and the routes you are interested in.

Information collected automatically:

• Device and usage data such as IP address, browser type, pages viewed and actions taken, used to secure and improve the Platform.
• Cookies and similar storage needed to keep you signed in and to remember your progress, described in section 10.

Information from third parties:

• If you sign in with Google, we receive your name, email address and profile picture from Google.
• Our payment partner, Flutterwave, tells us whether a payment succeeded along with a transaction reference. We never receive or store your full card details.

• To create and manage your account and sign you in securely, including sending one-time verification codes.
• To verify your identity and your trips, and to show other users that you are verified.
• To match Senders with Carriers, process bookings, hold funds in escrow and pay out.
• To let users communicate about a booking, and to send you service notifications.
• To investigate disputes, prevent fraud and prohibited shipments, and enforce our Terms.
• To meet our legal obligations, such as tax, accounting and anti-money-laundering requirements.
• To understand how Waybl is used and improve it, and — only where you have agreed — to send you marketing updates.

We only process your personal data where the law allows us to. Depending on the purpose, we rely on:

• Contract: processing needed to provide the service you signed up for, such as bookings and payments.
• Legal obligation: processing required by law, such as keeping financial records or responding to lawful requests.
• Legitimate interests: keeping the Platform safe, preventing fraud and improving our service, balanced against your rights.
• Consent: for optional processing such as marketing emails. You can withdraw consent at any time.

We do not sell your personal data. We share it only where needed:

• With other users: when you list a trip, express interest or are matched, the other party sees your name, profile photo, verification status and the booking details they need. Your ID document is never shown to other users.
• With service providers: payment processing (Flutterwave), cloud hosting, email and SMS delivery, and sign-in (Google), each bound to use your data only on our instructions.
• With authorities: where required by law, or where we reasonably believe it is necessary to prevent harm, fraud or the shipment of prohibited items.
• In a business transfer: if Waybl is involved in a merger, acquisition or sale of assets, subject to this policy continuing to protect your data.

Waybl serves routes between countries, including Nigeria, the United Kingdom and Ghana, and some of our service providers operate in other countries. Where your data is transferred across borders, we put appropriate safeguards in place, such as contractual protections approved under the applicable data protection laws.

• Account information is kept while your account is open, and deleted or anonymised after it is closed unless we need to keep it for the reasons below.
• Identity documents are kept only as long as needed to verify you and to handle fraud or disputes connected to your account.
• Booking and payment records are kept for as long as tax, accounting and anti-money-laundering laws require.
• Chat messages and dispute evidence are kept while the related booking may still be disputed or reviewed.

We use technical and organisational measures to protect your data, including encryption in transit, hashed passwords, access controls that limit verification data to authorised reviewers, and monitoring for suspicious activity. No system is completely secure, so please use a strong, unique password and keep your one-time codes private.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct information that is inaccurate or incomplete.
• Ask us to delete your data, subject to our legal obligations.
• Restrict or object to certain processing, including direct marketing.
• Receive your data in a portable format.
• Withdraw consent where we rely on it.

To exercise these rights, contact privacy@waybl.app. We may need to confirm your identity first. You also have the right to complain to your data protection authority, such as the Nigeria Data Protection Commission, the UK Information Commissioner’s Office or Ghana’s Data Protection Commission.

We use a small number of cookies and browser storage items that are necessary for Waybl to work:

• Session cookies that keep you signed in securely.
• Session storage that remembers your progress during sign-up, so details are not lost if you navigate away. It is cleared when you finish or close the tab.
• Local storage that tracks when a verification code was last sent, so resend limits apply fairly.

If we introduce analytics or marketing cookies, we will ask for your consent where the law requires it.

Waybl is only for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will remove it.

We may update this policy from time to time. If we make material changes, we will let you know by email or in the app before they take effect. The date at the top of this page shows when it was last updated.

For any questions about this policy or your personal data, email privacy@waybl.app.