Privacy Policy
How we collect, use, and protect your information
Last updated: December 2024
Introduction
Welcome to Cilbup ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our anonymous messaging and tipping platform.
By using our Service, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Information You Provide
- Account Information: When you create an account, we collect your email address, username, and password (encrypted and hashed).
- Profile Information: Display name, bio, and avatar that you choose to share publicly.
- Payment Information: For tip withdrawals, we collect your bank account details (bank name, account number, account holder name). Payment card details for sending tips are processed directly by Paystack — we do not store your card information.
- Phone Number: If you enable WhatsApp notifications, we collect your phone number.
- Settings: Your preferences for notifications, privacy, tips, and payout settings.
Information Collected Automatically
- Device Information: Browser type, operating system, device identifiers.
- IP Address: We collect IP addresses for security, rate limiting, and abuse prevention.
- Usage Data: Pages visited, features used, time spent on the platform.
- Cookies: We use cookies and similar technologies to maintain your session and preferences.
Anonymous Messages
When someone sends you an anonymous message:
- We do not share any identifying information about the sender with the recipient.
- Messages are linked only to the recipient's account.
- We may retain sender metadata (IP address, device info) for abuse prevention and legal compliance.
- If a message includes a tip, the sender's email is provided to Paystack for payment processing and receipts. This email is not shared with the recipient.
Payment Data & Legal Compliance
Important disclosure about tipped messages:
When a fan sends a tip with their message, we retain the following information:
- Sender's email address (provided for payment processing)
- Transaction reference (unique identifier for the payment)
- Payment timestamp and amount
This information is stored securely and is never shared with message recipients. However, it may be:
- Used by our payment provider (Paystack) to verify and process the transaction
- Disclosed to law enforcement or government authorities if legally required (e.g., court order, fraud investigation, or compliance with Nigerian financial regulations)
- Used to investigate and resolve payment disputes or chargebacks
Why we retain this data: Nigerian financial regulations and anti-money laundering (AML) laws require payment platforms to maintain records of transactions. This data helps us comply with legal obligations and protect both creators and fans from fraud.
If authorities require identification of a payment sender for legitimate legal purposes, Paystack can use the sender's email address to trace the payment to the individual's payment method.
Currency & Geographic Scope
Cilbup currently operates with Nigerian Naira (NGN) only.
- All tips are processed in NGN
- All payouts are made in NGN to Nigerian bank accounts
- We primarily serve users in Nigeria
We may expand to additional currencies and regions in the future.
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Process tip transactions and payouts
- Send notifications via email and/or WhatsApp
- Verify your identity for withdrawals and account security
- Respond to your comments and questions
- Monitor and analyze trends, usage, and activities
- Detect, investigate, and prevent fraudulent transactions and abuse
- Comply with legal obligations
- Personalize and improve your experience
WhatsApp Notifications
If you enable WhatsApp notifications:
- We send you notifications about new messages and tips via WhatsApp
- Your phone number is stored securely and used only for platform notifications
- You can disable WhatsApp notifications at any time in your settings
- We do not share your phone number with other users or third parties (except our messaging service provider)
Information Sharing
We do not sell your personal information. We may share information in these circumstances:
- Payment Processors: With Paystack for processing tips and payouts.
- Service Providers: With third parties who perform services on our behalf (e.g., hosting, email delivery, WhatsApp messaging).
- Legal Requirements: If required by law, court order, or in response to valid legal requests from Nigerian authorities or other jurisdictions.
- Safety & Abuse Prevention: To protect the safety of users, investigate abuse, or enforce our Terms of Service.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
- Consent: With your consent or at your direction.
Data Security
We implement appropriate security measures to protect your personal information, including:
- Encryption of sensitive data in transit (HTTPS) and at rest
- Secure password hashing (bcrypt)
- Access controls and authentication
- Regular security assessments
- Rate limiting to prevent abuse
However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your personal information
- Export your data in a portable format
- Opt-out of certain data processing
- Withdraw consent for optional features (like WhatsApp notifications)
To exercise these rights, please contact us through your account settings or via email.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. We may retain certain information after account deletion for:
- Legal obligations (e.g., tax records for financial transactions)
- Dispute resolution
- Fraud and abuse prevention
- Enforcing our Terms of Service
Deleted accounts and their associated data are typically removed within 30 days, except where retention is required by law.
Financial records (tips, withdrawals) may be retained for up to 7 years for tax and regulatory compliance.
Children's Privacy
Our Service is not intended for users under the age of 18.
We do not knowingly collect personal information from individuals under 18. If we learn we have collected such information, we will delete it promptly.
If you believe a minor is using Cilbup, please contact us immediately.
Anonymous Messaging & Privacy
For Message Senders
- Your messages are anonymous to the recipient
- We do not share your identity with recipients
- We may retain your IP address and device information for abuse prevention
- If you send a tip, your email is used only for payment processing (not shared with recipient)
For Message Recipients (Creators)
- You receive messages without knowing who sent them
- You can report or block abusive content
- We may investigate reports using retained sender metadata
- You control your profile visibility and notification preferences
Cookies & Tracking
We use cookies and similar technologies for:
- Essential cookies: Required for the platform to function (authentication, security)
- Preference cookies: Remember your settings and preferences
- Analytics cookies: Help us understand how users interact with the platform
You can control cookies through your browser settings, but disabling essential cookies may prevent you from using the Service.
Third-Party Services
Our Service uses the following third-party services:
- Paystack: Payment processing (Paystack Privacy Policy)
- Google/GitHub: Social login authentication
- Pusher: Real-time notifications
These services have their own privacy policies that govern their use of your data.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your country.
By using Cilbup, you consent to such transfers. We take steps to ensure your data remains protected in accordance with this policy.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new policy on this page
- Updating the "Last Updated" date
- Sending an email notification for material changes
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
- Email: privacy@cilbup.site
- Support Email: support@cilbup.site
- Through the app: Account Settings → Help & Support
By using Cilbup, you acknowledge that you have read and understood this Privacy Policy.