Privacy Policy

1. Information we collect

• Account: your name, email address and password, stored scrambled so no one can read it. If you continue with Google, Google shares your name and email address with us, never your Google password.
• Your agreement: when you confirmed you're 18 or older and accepted our terms.
• Orders and wallet: the links or usernames you order for, your orders, top-ups, wallet history, points and invites.
• Safety: your connection's IP address, used briefly to stop repeated log-in, sign-up and password reset attempts.
• Visit counts: which pages are visited, the type of device and browser, and the country, counted by Cloudflare Web Analytics. It doesn't use cookies and doesn't identify you.

We never ask for your social media passwords, and we never see your card number.

2. How we use it

• To run your account, wallet and orders, which is the service you signed up for.
• To keep payment and order records, because the law requires it.
• To protect accounts and stop fraud and abuse.
• To email you a link to choose a new password, only when you ask for one.
• To reply when you contact us.

3. Who we share it with

• Delivery partners get only the link and amount needed to fill an order. Never your name, email or password.
• Bachs, our payment partner, processes top-ups on its own secure page.
• Cloudflare hosts the site and our database, counts visits, and runs the anti-bot check on the sign-up page.
• Google, only if you choose “Continue with Google”.
• Resend delivers our password reset emails, so it receives your email address when you ask for one.
• Authorities, only when the law requires it.

We don't sell your information and we don't use advertising trackers.

4. Where it's stored

Cloudflare, Google and Resend may store or process data outside Nigeria. Where they do, we rely on the safeguards in their data protection terms, as the NDPA allows.

5. How long we keep it

• Your account details: while your account is open.
• Log-ins: 60 days, or until you log out.
• Orders, payments and wallet history: as long as Nigerian tax and accounting law requires, then deleted.

6. How we protect it

Passwords are stored scrambled, every connection is encrypted, and only the owner can open our admin. If a data breach puts your information at risk, we'll tell you and the Nigeria Data Protection Commission, as the law requires.

7. Your rights

You can delete your account yourself from the Account page. You can also ask us for a copy of your information, to correct it, to send it to you in a portable format, or to stop using it in a certain way.

When an account is deleted, we remove the name, email, password and log-ins. Order and payment records stay without your name, as the law requires, and we keep a scrambled code made from the email so a new account with the same email can't collect invite bonuses again.

If you're unhappy with how we handle your information, you can complain to the Nigeria Data Protection Commission.

8. Under 18s

9socials is only for people 18 or older. If we learn an account belongs to someone younger, we'll close it and return any money left in its wallet.

9. Changes to this policy

If we change this policy, we'll update the date above.