Legal
Privacy policy
What we collect, why, who else sees it, how long we keep it, and what you can ask us to do about it.
Draft pending legal review. This document has not yet been reviewed by a qualified lawyer. It must be reviewed before ViralPoint opens to the public.
The short version
ViralPoint is a marketplace that moves money between brands and creators. That means we hold more about you than a typical website does — bank details, identity checks, and a record of every transaction — because we could not pay you otherwise, and because financial regulators require it.
What we don't do:
- We don't sell your data. Not to advertisers, not to anyone.
- We never see or store your card number. Our payment providers tokenise it and we keep only the last four digits and the card type.
- We never see your social media passwords. Linking an account uses the platform's own authorisation flow.
- We don't host your content. Your posts stay on your own accounts.
Who is responsible: AriAde Ltd, Lagos, Nigeria, is the data controller for ViralPoint.
What we collect
When you join the waitlist
Your email address and whether you're a brand or a creator. Optionally your name, country, and either your company and budget range, or your platform, handle and follower range, plus how you found us and basic request metadata.
When you create an account
Email, hashed password, name, phone if given, and your country — which fixes your currency, your payment rails, and which offers you can see. Brands add company details; creators add a display name, handle, bio, niches and languages.
When you link a social account
Your handle, platform account ID, follower and engagement figures, and an encrypted access token used for exactly one thing: reading view counts on posts you submit to a campaign.
When money moves
A payment token and the last four digits of a card — never the full number or CVV — for money coming in; your bank or mobile money details, and the account holder name we verify with your bank, for money going out; and a permanent ledger record of every transaction.
Automatically, and when you contact us
Your IP address and browser, and an activity log of significant actions on your account — the same log applies to our own staff. When you write to us we keep your message and the category you chose.
Why we collect it
Running your account and the offers you take part in, and taking payment or sending payouts, are done to perform our contract with you. Identity checks and anti-fraud work are a legal obligation and our legitimate interest in a marketplace that isn't defrauded. Marketing email and reading your social view counts are both based on your consent, which you can withdraw at any time — though we then can't settle a pay-per-view campaign without a count to pay against.
Who we share it with
Payment providers (Paystack, Flutterwave, Monnify or Stripe, depending on your country and direction of payment), the social platform you link, our email and hosting providers, the other side of a transaction (limited to your public profile, never your email, phone or bank details), and law enforcement or regulators where legally required. We do not sell personal data or share it for third-party advertising.
How long we keep it
Your account, until deletion plus a short grace period. Financial records for as long as tax and anti-money-laundering law requires — typically several years — regardless of account deletion. Identity documents for as long as regulation requires, then deleted. The activity log is retained as an audit record. Waitlist entries until you unsubscribe or we launch in your market. Contact messages for two years. Social tokens are deleted the moment you unlink an account.
How we protect it
Passwords are hashed and unreadable by anyone at ViralPoint. Social tokens and gateway credentials are encrypted at rest with a key held outside the database. Everything is served over TLS. Staff access is graduated by role, and every staff action — including viewing your account for support — is logged.
Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it (subject to the financial records we must keep), export it, stop using it for a purpose, withdraw consent, or object to an automated decision. Write to us through the contact page and choose "Privacy or my data" — that routes to an administrator, not general support. We respond within 30 days.
International transfers
We operate across Africa and beyond, so your data may be processed in a country other than your own — by a payment provider settling a cross-border payout, for example. Where a transfer needs a legal safeguard, we use the ones the relevant jurisdiction recognises.
Cookies and storage
There is no advertising or cross-site tracking on ViralPoint. Sign-in tokens live in your browser's session storage and clear when you close the tab. Your light/dark preference is stored locally and never reaches us. Our emails may record whether they were opened, so we can tell whether a payout notice reached you; marketing email can be turned off entirely in your settings.
Age
ViralPoint is for people 18 and over. We do not knowingly collect data from anyone younger; tell us if you believe a minor has an account and we will remove it.
Changes
If we change this policy in a way that materially affects you, we'll email you before it takes effect rather than quietly updating the date at the top.