Privacy Policy
How our WhatsApp concierge collects, uses, and protects your information.
Last updated: July 10, 2026Who We Are
LetuSell is a WhatsApp concierge for campus vendors. When a student wants to buy something on campus, they ask LetuSell on WhatsApp in plain English or Pidgin, and we introduce them to the right nearby vendor — landing them directly in that vendor's own WhatsApp.
This Privacy Policy explains what personal information we collect when vendors and students use the LetuSell concierge, how we use it, and your rights. We are committed to handling your data responsibly and in line with the Nigeria Data Protection Regulation (NDPR).
LetuSell is operated by Slime Labs, a business based in Nigeria. If you have questions about this policy, you can reach us at privacy@letusell.ng.
Using the LetuSell online marketplace instead? That service has its own marketplace privacy policy.
Information We Collect
We collect information in the following ways:
Vendor waitlist & onboarding
When you join as a vendor, we collect your business name, owner name, WhatsApp number, campus, and a short description of what you sell. During onboarding we also record your menu items and prices so the concierge can quote them accurately.
Concierge conversations (students)
When you message the concierge on WhatsApp, we receive your WhatsApp number, your WhatsApp profile name, and the content of your messages — for example what you're looking for and any preferences you share. We use this to understand your request and match you to a vendor.
Location for proximity routing
To surface the closest vendor, we use only the location details you choose to tell the concierge — such as your hostel or area. We do not track your precise GPS location in the background.
Usage and analytics data
We use PostHog and Google Analytics to collect anonymised data about how people interact with our website — page views, button clicks, and navigation patterns. These tools may store a cookie or device identifier to track sessions.
Device and log data
Our hosting provider, Vercel, automatically collects server logs including IP address, browser type, and pages accessed. This is standard for any web service.
How the Handoff Works
LetuSell makes the introduction — it is not a middleman and it does not process payments. Once we match a student to a vendor:
- The student lands in the vendor's own WhatsApp chat
- From that point the conversation, any order, pricing details, and payment happen directly between the student and the vendor
- That ongoing chat lives in WhatsApp and is governed by WhatsApp's and Meta's own privacy terms — not by LetuSell
- The vendor keeps the customer contact and any repeat business
Because we never handle checkout, LetuSell does not collect or store any card number, bank details, or payment credentials.
How We Use Your Information
We use the information we collect to:
- Match students to vendors — understand a request in English or Pidgin and route it to the closest relevant vendor
- Build and maintain vendor listings — set up your menu and keep your ₦ prices current
- Onboard waitlisted vendors — contact you on WhatsApp to get your brand set up
- Improve the concierge — analyse anonymised usage to make matching and replies better
- Respond to support requests — help you when something goes wrong
We do not use your information for third-party advertising, sell your data to other companies, or send marketing messages without your consent.
Data Sharing and Third Parties
We do not sell your personal data. We share data only with the service providers that power LetuSell, and only to the extent necessary for them to do their job.
All providers are contractually required to handle your data securely and are prohibited from using it for their own marketing purposes.
How Long We Keep Your Data
- Vendor and waitlist data — retained while your listing is active or your interest stands. If you ask us to remove you, we delete your entry within 30 days, except where the law requires otherwise.
- Concierge messages — retained only as long as needed to complete the introduction and support the request, then minimised. Note that the ongoing chat in the vendor's WhatsApp is retained by WhatsApp, not by us.
- Analytics data — retained according to PostHog's and Google Analytics' own retention policies.
- Server logs — retained for a short period (typically 30 days) in line with Vercel's standard practices.
Your Rights
Under the Nigeria Data Protection Regulation (NDPR), you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate or incomplete information
- Deletion — request that we delete your personal data (subject to legal retention requirements)
- Portability — request your data in a portable format
- Objection — object to specific types of processing
To exercise any of these rights, email privacy@letusell.ng. We will respond within 30 days and may ask you to verify your identity first.
If you believe your rights have been violated, you can lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
Cookies and Tracking
On our website we use PostHog and Google Analytics, which set cookies or local-storage identifiers to track sessions and page views. This helps us understand how vendors and students discover LetuSell. Data is anonymised where possible.
You can block cookies in your browser settings at any time. Blocking analytics cookies will not affect your ability to browse the site or message the concierge. We do not use advertising cookies, cross-site tracking cookies, or share cookie data with advertisers.
Security
We take reasonable steps to protect your personal data:
- All data is transmitted over HTTPS (TLS encryption)
- WhatsApp messages travel over Meta's WhatsApp Cloud API, which is encrypted in transit
- Our database is hosted in a secure cloud environment with access controls
- Access to production systems is limited to authorised team members
No system is completely immune to security incidents. If we become aware of a breach that affects your personal data, we will notify affected users and the relevant authorities in line with NDPR requirements.
Changes to This Policy
We may update this Privacy Policy from time to time — for example when we add features, onboard new service providers, or when the law changes. When we make significant changes, we will update the "Last updated" date at the top of this page.
Contact Us
If you have questions about this policy, want to exercise your data rights, or have a privacy concern, get in touch. We aim to respond to all privacy-related enquiries within 5 business days.