Privacy Policy

1. Who we are

Stackd (stackdsa.co.za) is operated by Nuvela Group (PTY) Ltd, a company registered with the Companies and Intellectual Property Commission (CIPC) in South Africa. For any privacy-related query, contact studentstacksa@gmail.com.

2. Information we collect

We collect information you give us directly, and some collected automatically:

• Account information: name, email address, campus, and password (handled securely by Firebase Authentication — we never see or store your raw password).
• Listing information: anything you include in a listing — title, description, price, category, contact details (WhatsApp, Instagram, email, website), and any photo you upload.
• Payment information: processed entirely by PayFast, our payment provider. We never receive or store your card or banking details — we only receive confirmation that a payment succeeded, the amount, and a subscription reference token.
• Usage information: which listings you view or save, and basic technical data (like browser type) collected automatically by Firebase for security purposes such as reCAPTCHA/App Check bot protection.

3. How we use your information

• To create and manage your account and listings
• To process payments and manage subscriptions via PayFast
• To enforce plan limits, promo codes, and platform rules
• To communicate with you about your account (e.g. plan changes, listing expiry)
• To keep the platform secure and prevent abuse or fraud

We do not sell your personal information to third parties.

4. Who can see your information

Your listing details (title, description, price, campus, and any contact info you choose to add) are public and visible to anyone browsing Stackd — that's the point of a marketplace listing. Your account email and password are never shown publicly. Other students can only contact you through whichever contact method you choose to add to a listing.

5. Where your information is stored

Data is stored using Google Firebase (Firestore database, Authentication, and Cloud Functions), which may store data on servers outside South Africa. Payment data is handled by PayFast, a South African payment gateway. Both providers maintain their own security and compliance standards.

6. How long we keep your information

We keep your account and listing data for as long as your account is active. If you delete a listing, it's deactivated immediately and no longer shown publicly. If you'd like your account and associated data fully deleted, email studentstacksa@gmail.com and we'll action this within a reasonable time.

7. Your rights

Under South Africa's POPIA, you have the right to access, correct, or request deletion of your personal information, and to object to certain processing. To exercise any of these rights, contact us at studentstacksa@gmail.com.

8. Cookies and similar technology

Stackd uses essential cookies/local storage needed to keep you signed in, plus Google's reCAPTCHA and Firebase App Check to protect the platform from bots and abuse. We don't use advertising or tracking cookies.

9. Children's privacy

Stackd is intended for university students, generally 18 years or older. We don't knowingly collect information from children under 18.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact us

Questions about this policy? Email studentstacksa@gmail.com.