Afrippa
Privacy notice
Version 2026-10-28 · last updated 28 October 2026
Draft for lawyers' review. Afrippa is not open for live trading yet. These documents describe how it works and will be reviewed by qualified lawyers in each market before it opens.
1. Who we are
Afrippa is a venture of Golojan Ltd. Until the company that will operate Afrippa is confirmed, these drafts name De-Golojan Technologies Ltd (RC 1606658), 3 Agu Street, Upper Housing Estate Extension, Abakpa Nike, Enugu, Nigeria, as its operator ("Afrippa", "we", "us").
We decide how your personal data is used (we are its controller). Write to us at support@afrippa.com or through Help.
2. What we keep
- Your account: name, email address, country, password (only as a secure hash), mobile number if you add one, your Google account's ID if you sign in with Google, your two-step method (secrets encrypted, recovery codes only as hashes) and your nickname.
- Trading: your ads, orders, the coins and amounts, the order room's messages and files, feedback, blocks, reports, strikes and decisions on appeals.
- Payment methods: your bank account, mobile money wallet or payment service details, encrypted, with the name they are held in.
- Wallets: your deposit addresses, deposits, withdrawal addresses and withdrawals, and their blockchain transactions.
- Identity checks (below).
- Devices: a random ID afrippa.com keeps in its cookie on each browser you use; we keep only a keyed hash of it, with when it was first and last seen.
- Help: your chats and questions, with the AI assistant's answers. If you chat without signing in, the name and email address you give.
- Notices we send you, and records of security events such as sign-ins from a new device.
- Technical data: your IP address, used for rate limits and security, and the requests your browser makes, kept in our server logs.
3. Identity checks
Before you trade live, Afrippa Verify (verify.afrippa.com) checks your identity: your ID document's details and photos, a selfie, and short liveness photos taken by your camera. Comparing your face with your ID uses biometric data, so we ask for your explicit consent first; without it we cannot check you, and you cannot trade live.
Photos are stripped of hidden data (such as location), encrypted, and stored privately. A person on Afrippa's team reviews them. ID numbers are encrypted, and a keyed fingerprint of them shows our reviewers when the same ID is used on another account. We keep the outcome, your verified name and your document's country.
4. Why we use it
| What for | Our reason |
|---|---|
| Running your account, wallets and trades, and helping you | Our contract with you |
| Identity checks with biometric data | Your explicit consent, and the law on knowing our customers |
| Preventing fraud: limits, device checks, same-person checks, standing and refused text | Our legitimate interest in a safe market, and the law |
| Screening withdrawal addresses against sanctions lists, and keeping records | The law |
| Security notices and emails about your account | Our contract with you, and our legitimate interest in your account's safety |
Some decisions are made automatically: limits, the number of strikes or cancellations, refusing ad terms or feedback that carry contact details, and refusing withdrawals to sanctioned addresses. A person on Afrippa's team reviews them if you ask through Help.
5. Who sees it
- Other traders see your nickname, your ads, your trading figures and feedback, never your name or contact details.
- The other side of an open order sees the name payments must come from and, for the seller's account, its details; the seller sees the account the buyer paid from. They are shown only while the order is open.
- Afrippa's team, as their work needs.
- Service providers working for us: database hosting (Neon, United States), servers and file storage (DigitalOcean, United States), the site's hosting (Vercel), email and text message services, Google (sign-in with Google), the AI providers behind the assistant (Anthropic and OpenAI; your messages are sent with secrets and long numbers masked), blockchain data providers, the key-management service behind our crypto signer (Turnkey, which sees no personal data), and sanctions screening services (Chainalysis, TRM Labs; withdrawal addresses only).
- Authorities, where the law requires it.
We do not sell your personal data, and we do not use it for advertising.
6. Where it is stored
Your data is stored in the United States. Where it leaves your country, we use the safeguards your country's law requires; these are being confirmed with lawyers in each market.
7. How long we keep it
| What | How long |
|---|---|
| Identity documents and photos | Deleted 90 days after a check is declined, and a week after an unfinished one is left. For an approved check, five years (to be confirmed with lawyers). |
| Orders, trades, wallets and their records | As long as the law requires financial records to be kept (to be confirmed for each market). |
| Chats with Help | 12 months after they end. |
| Questions to Help | Two years after they are resolved. |
| Notices in your account | 90 days. |
| Your account, payment methods and device records | While your account is open; removed payment methods are kept with the orders that used them. |
8. Your rights
Depending on where you live, you can ask for a copy of your data, to correct it, to delete it, to restrict or object to its use, to move it, and to withdraw consent (for identity checks, before the check is decided). Ask us through Help or by email; we answer within a month. Some data must be kept by law even if you ask us to delete it.
You can complain to your country's data protection authority, for example Nigeria's Data Protection Commission, Ghana's Data Protection Commission or Kenya's Office of the Data Protection Commissioner.
9. Children
Afrippa is for adults only. We do not knowingly keep data about anyone under 18; we close such accounts when we find them.
10. Changes
We update this notice when what we do changes, and tell you of important changes before they apply.