Privacy Policy

1. Who we are

CrateWings Limited ("CrateWings", "we", "us", "our") operates TradeWings, a mobile app that helps farmers, cooperatives, aggregators, processors and exporters assess export readiness, trace batches, and connect with buyers. This Privacy Policy explains what information TradeWings collects, how we use it, and the choices you have. It applies to the TradeWings mobile app and this website.

2. Information we collect

• Account & profile information: name, business or organisation name, role (farmer, cooperative, aggregator, processor, or exporter), phone number, email address, and country/region.
• Government ID numbers: during supplier onboarding we collect a National Identification Number (NIN) and, for registered businesses, a Corporate Affairs Commission (CAC) registration number, to verify identity and legal standing. We do not collect Bank Verification Numbers (BVN).
• Produce & batch data: photos of produce, batch identifiers, crop type, harvest/packing dates, and any notes you add for traceability.
• Export-readiness data: AI-generated quality scores, blemish/ripeness/size grading, and destination-market pass/fail assessments derived from photos you submit.
• Marketplace activity: listings you publish, enquiries you send or receive, and messages exchanged with buyers or sellers through the app.
• Location & boundary data: where you enable it, approximate or precise location associated with a batch or scan, and farm or mine boundary maps you plot on the ground, used for traceability and export documentation.
• Photos: farm or mine site photos, photos taken at each season stage, and photos captured for field agent assessments — in addition to produce and batch photos above.
• Device & usage data: device model, OS version, app version, crash logs, and general usage analytics.
• Camera & photo access: used only when you choose to scan produce or upload an image; we do not access your photo library beyond the images you select.

2a. Identity verification

Where identity checks are switched on for supplier onboarding, we use Prembly (IdentityPass), a third-party identity-verification service, to validate the government ID numbers described above and to check that the submitted name matches the ID record. We only store the verification result (pass/fail) and a name-match flag from this check — we do not store the personal data Prembly returns as part of the verification (such as the full ID record).

2b. Waitlist

If you join the TradeWings waitlist on this website, we collect your full name, email address, country, whether you are a producer or a buyer, the commodity you are interested in, and your consent. You may also give a phone number, a state or region (producers) and a company name (buyers). We use these details only to tell you about the TradeWings launch and to decide who to invite first. We rely on your consent, which you give by ticking the box on the form. We keep waitlist entries until the launch communications are complete or you ask us to delete your entry, whichever comes first, and no longer than 12 months after you join. We email you once to confirm your sign-up, and that email has a link that deletes your entry at once. To have it corrected, write to the address under "Contact us" below. We do not sell waitlist details, and we share them only with the email and hosting providers that process them for us.

3. How we use information

• Generate AI-powered quality scans and export-readiness scores.
• Build and maintain batch traceability records from source to departure.
• Power the marketplace — matching listings with buyers and displaying your verified score.
• Send service notifications (scan results, enquiry alerts, compliance reminders).
• Improve and troubleshoot the app, including crash and performance analytics.
• Respond to support requests and communicate about your account.
• Meet legal, customs, and phytosanitary record-keeping obligations.

4. How we share information

We do not sell your personal information. We share it only:

• With buyers you choose to engage on the marketplace (e.g. your listing, verified score, and any details you choose to include).
• With service providers who process data on our behalf — image processing/AI inference, analytics, and customer support tooling — under confidentiality obligations.
• With Prembly (IdentityPass), when identity checks are switched on, solely to verify a government ID number and name match at onboarding (see "Identity verification" above).
• With Resend, our email delivery provider, to send account, verification, and notification emails.
• With logistics, compliance, or certification partners when needed to support an export you are progressing, and only to the extent necessary.
• When required by law, regulation, or a valid legal request, or to protect the rights, safety, or property of CrateWings, our users, or the public.
• In connection with a merger, acquisition, or sale of assets, subject to this Policy continuing to apply to your information.

5. Data retention

We retain batch, traceability, and account data for as long as your account is active, and for a reasonable period afterward to meet record-keeping, audit, and legal obligations common in agricultural export (typically up to 7 years for trade/compliance records), unless a shorter period is required by law or you request deletion sooner and no legal basis requires further retention.

6. Where data is hosted

Your data is hosted on servers CrateWings operates itself, not a third-party database-as-a-service or storage provider: self-hosted PostgreSQL databases and self-hosted object storage, run by CrateWings in the regions where we operate. We use Resend, a third-party provider, only to send email, and Prembly as described above only for identity verification.

7. Your rights

Depending on where you're based, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected]. We will respond within the time required by applicable law (for example, the Nigeria Data Protection Act, or the UK/EU GDPR where it applies to you).

8. Account deletion

You can request deletion of your account at any time. See Delete your account for how to do this from the app or the web, and what is deleted versus kept. In short: your account is disabled and your email, phone number, and name are removed or anonymised; your buyer profile and notifications are deleted; trade and traceability records (batches and supplier records) are kept, without your personal details, as legal and traceability records.

9. International transfers

TradeWings connects producers with buyers across regions (including the UK, UAE, and EU). Your information may be processed in countries other than your own. Where we transfer personal data internationally, we use safeguards required by applicable data protection law.

10. Security

We use technical and organisational measures — encryption in transit, access controls, and regular review of our infrastructure — to protect your information. No system is completely secure; please use a strong, unique password and keep your device secure.

11. Children's privacy

TradeWings is a business tool for agricultural producers and exporters and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

12. Cookies (website)

Our website uses only the minimal cookies/local storage necessary to operate the site. We do not use third-party advertising cookies.

13. Changes to this policy

We may update this Privacy Policy as TradeWings evolves. We'll update the "last updated" date above and, for material changes, provide notice in the app.

14. Contact us

Questions or requests about this Privacy Policy or your data: [email protected], or CrateWings Limited, Lagos, Nigeria.