Privacy Policy

Introduction

Welcome to Cilbup ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our anonymous messaging platform with paid priority features.

By using our Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

• Account Information: When you create an account, we collect your email address, username, and password (encrypted and hashed).
• Profile Information: Display name, bio, and avatar that you choose to share publicly.
• Payment Information: For earnings withdrawals, we collect the payout details required by the active payment processor (e.g. bank account details or wallet address). Payment details for sending paid messages (card, bank transfer, or cryptocurrency) are processed directly by our third-party payment processors — we do not store your card or wallet credentials.
• Phone Number: If you enable WhatsApp notifications, we collect your phone number.
• Settings: Your preferences for notifications, privacy, paid messages, and payout settings.

Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers.
• IP Address: We collect IP addresses for security, rate limiting, and abuse prevention.
• Usage Data: Pages visited, features used, time spent on the platform.
• Cookies: We use cookies and similar technologies to maintain your session and preferences.

Anonymous Messages

When someone sends you an anonymous message:

• We do not share any identifying information about the sender with the recipient.
• Messages are linked only to the recipient's account.
• We may retain sender metadata (IP address, device info) for abuse prevention and legal compliance.
• If a message includes a paid boost, the sender's email (if provided) is passed to our third-party payment processor for payment processing and receipts. This email is not shared with the recipient. Payments made via cryptocurrency do not require an email.

Payment Data & Legal Compliance

Important disclosure about paid messages:

When a fan sends a paid boost with their message, we retain the following information:

• Sender's email address (if provided for payment processing)
• Transaction reference or intent address (unique identifier for the payment)
• Payment timestamp and amount
• Payment method (card, bank transfer, or cryptocurrency)

This information is stored securely and is never shared with message recipients. However, it may be:

• Used by our third-party payment processors to verify and process the transaction
• Disclosed to law enforcement or government authorities if legally required (e.g., court order, fraud investigation, or compliance with applicable financial regulations)
• Used to investigate and resolve payment disputes or chargebacks

Why we retain this data: Financial regulations and anti-money laundering (AML) laws require payment platforms to maintain records of transactions. This data helps us comply with legal obligations and protect both creators and fans from fraud.

Currency & Geographic Scope

Cilbup supports multiple payment methods and currencies depending on the active payment processor:

• Paid messages may be processed in fiat currencies (e.g. NGN, USD) or cryptocurrency (e.g. USDC)
• Payouts are made via the payout method supported by the active processor (e.g. bank transfer or crypto wallet)
• We serve users globally, with availability depending on the supported payment processors

Supported currencies and payout methods may change as we add or update processors.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process paid message transactions and payouts
• Send notifications via email and/or WhatsApp
• Verify your identity for withdrawals and account security
• Respond to your comments and questions
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and abuse
• Comply with legal obligations
• Personalize and improve your experience

WhatsApp Notifications

If you enable WhatsApp notifications:

• We send you notifications about new messages and boosts via WhatsApp
• Your phone number is stored securely and used only for platform notifications
• You can disable WhatsApp notifications at any time in your settings
• We do not share your phone number with other users or third parties (except our messaging service provider)

Information Sharing

We do not sell your personal information. We may share information in these circumstances:

• Payment Processors: With our third-party payment processors for processing paid messages and payouts.
• Service Providers: With third parties who perform services on our behalf (e.g., hosting, email delivery, WhatsApp messaging).
• Legal Requirements: If required by law, court order, or in response to valid legal requests from Nigerian authorities or other jurisdictions.
• Safety & Abuse Prevention: To protect the safety of users, investigate abuse, or enforce our Terms of Service.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• Consent: With your consent or at your direction.

Data Security

We implement appropriate security measures to protect your personal information, including:

• Encryption of sensitive data in transit (HTTPS) and at rest
• Secure password hashing (bcrypt)
• Access controls and authentication
• Regular security assessments
• Rate limiting to prevent abuse

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information
• Export your data in a portable format
• Opt-out of certain data processing
• Withdraw consent for optional features (like WhatsApp notifications)

To exercise these rights, please contact us through your account settings or via email.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may retain certain information after account deletion for:

• Legal obligations (e.g., tax records for financial transactions)
• Dispute resolution
• Fraud and abuse prevention
• Enforcing our Terms of Service

Account Deactivation & Deletion

When you deactivate your account:

• Immediate effect: Your profile becomes inaccessible, you cannot log in, and you cannot receive messages
• 30-day grace period: Your account data is retained for 30 days. During this period, you can contact our support team to restore your account
• Permanent deletion: After 30 days, your account and personal data (profile, messages, settings) are permanently deleted

Exception for financial records: Transaction history (paid messages, withdrawals) may be retained for up to 7 years as required by Nigerian tax and financial regulations, even after permanent deletion.

To restore your account within the grace period, contact support@cilbup.site with your registered email address.

Children's Privacy

Our Service is not intended for users under the age of 18.

We do not knowingly collect personal information from individuals under 18. If we learn we have collected such information, we will delete it promptly.

If you believe a minor is using Cilbup, please contact us immediately.

Anonymous Messaging & Privacy

For Message Senders

• Your messages are anonymous to the recipient
• We do not share your identity with recipients
• We may retain your IP address and device information for abuse prevention
• If you send a paid boost, your email is used only for payment processing (not shared with recipient)

For Message Recipients (Creators)

• You receive messages without knowing who sent them
• You can report or block abusive content
• We may investigate reports using retained sender metadata
• You control your profile visibility and notification preferences

Cookies & Tracking

We use cookies and similar technologies for:

• Essential cookies: Required for the platform to function (authentication, security)
• Preference cookies: Remember your settings and preferences
• Analytics cookies: Help us understand how users interact with the platform

You can control cookies through your browser settings, but disabling essential cookies may prevent you from using the Service.

Third-Party Services

Our Service uses the following third-party services:

• Payment Partner: Payment processing
• Google/GitHub: Social login authentication
• Pusher: Real-time notifications

These services have their own privacy policies that govern their use of your data.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your country.

By using Cilbup, you consent to such transfers. We take steps to ensure your data remains protected in accordance with this policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending an email notification for material changes

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

• Email: privacy@cilbup.site
• Support Email: support@cilbup.site
• Through the app: Account Settings → Help & Support

---

By using Cilbup, you acknowledge that you have read and understood this Privacy Policy.