Privacy Policy

Account Information

When you register on Proffita, we collect your name, email address, phone number, and password. For brand accounts, we additionally collect your company name, RC number, and business address.

Profile Information

Creators may optionally provide a profile photo, biography, location (country and city), preferred languages, and social media handles. This information is displayed publicly on your creator profile.

Social Account Data

When you connect a social account (TikTok, Instagram, YouTube, Facebook, X) via OAuth, we receive read-only access to your account's public metrics — follower count, post engagement data, and account verification status. We do not post on your behalf, access private messages, or read content outside of public metrics.

Financial Information

We collect your bank account details (account number, bank name, account name) when you add a withdrawal method. All payment processing is handled by our payment partner, Paystack. We do not store your card details directly on our servers.

Contest and Contract Activity

We collect records of contests you apply to, content you submit, contracts you enter, milestones you complete, and all associated engagement metrics pulled from connected social accounts.

Usage Data

We automatically collect information about how you interact with our platform — pages visited, features used, time spent, device type, browser, IP address, and referring URLs. This data is used solely to improve platform performance and user experience.

Platform operations

To create and manage your account, process contest applications, calculate engagement scores, distribute prize payouts, and manage contract agreements between brands and creators.

Creator discovery

Your public profile information — including connected social account metrics — is displayed to brands browsing Proffita's creator directory. You control which social accounts appear on your profile.

Communications

We send transactional emails (account confirmation, password reset, contest notifications, payment confirmations) and, with your consent, marketing communications about new contests and platform features.

Fraud prevention and safety

We use account and activity data to detect fake engagement, bot activity, account takeovers, and fraudulent withdrawal requests.

Legal compliance

We retain records to comply with Nigerian financial regulations, tax obligations, and to respond to lawful requests from regulatory authorities.

With brands

When you apply to a brand's contest or enter a contract, the brand can view your public creator profile, connected social account metrics, and the engagement data associated with your contest submission.

With service providers

We share data with Paystack (payment processing), cloud infrastructure providers, email delivery services, and analytics tools. All service providers are contractually bound to protect your data and use it only for the services they provide to Proffita.

Legal disclosures

We may disclose your information when required by Nigerian law, court order, or regulatory authority — or to protect the rights, property, or safety of Proffita, our users, or the public.

No sale of personal data

Proffita does not sell your personal information to third parties. We do not engage in data brokerage of any kind.

Technical safeguards

All data is encrypted in transit (TLS 1.2+) and at rest. Sensitive fields such as password hashes and payment tokens are encrypted with industry-standard algorithms. We undergo regular security audits.

Access controls

Only authorised Proffita staff with a legitimate business need can access personal data. All access is logged and audited.

Breach notification

In the event of a data breach that affects your personal information, we will notify you and relevant regulatory authorities within 72 hours of becoming aware of the breach, as required by applicable law.

Access and correction

You can view and edit your personal information at any time through your account settings. If you believe any information is inaccurate, you may request a correction by contacting us.

Account deletion

You may request deletion of your account and associated personal data by emailing us at the address below. We will process deletion within 30 days, subject to retaining records required for legal compliance (such as payment transaction records).

Social account disconnection

You can disconnect any connected social account from your Proffita profile at any time through your account settings. Disconnecting removes Proffita's OAuth access. Historical engagement data already collected will be retained as part of your contest record.

Marketing opt-out

You may unsubscribe from marketing emails at any time using the unsubscribe link in any marketing email, or by updating your notification preferences in account settings. Transactional emails (payments, contest results) cannot be opted out of while your account is active.

Essential cookies

We use cookies necessary for the platform to function — authentication tokens, session management, and security tokens. These cannot be disabled without breaking core platform features.

Analytics cookies

With your consent, we use analytics cookies to understand how users interact with the platform, identify performance bottlenecks, and improve user experience. These can be declined without affecting platform functionality.

Active accounts

We retain your personal data for as long as your account is active. Profile data, contest history, and contract records are retained to provide you with an accurate activity history.

Post-deletion

Following account deletion, we retain transaction and financial records for 7 years as required by Nigerian financial regulation (FIRS). All other personal data is deleted within 30 days of account deletion.

We may update this Privacy Policy from time to time. We will notify you of material changes via email and/or a prominent notice on the platform at least 14 days before the change takes effect. Continued use of Proffita after the effective date constitutes acceptance of the updated policy.