Privacy Policy

1. Information we collect

• Account data: name, email address, phone number (if provided), password (stored hashed), preferred currency, and account role/status.
• Transaction data: wallet funding and spending, orders, order targets/links you submit, marketplace purchases, balances, refunds, and related metadata.
• Payment data: we do not store full card numbers. Card/bank payments are handled by third-party processors; cryptocurrency deposits are processed by a third-party gateway and we store deposit addresses, transaction hashes, amounts, and confirmation data necessary to credit your Wallet.
• Verification data: information used to verify your identity or eligibility where required (e.g. for fraud prevention, AML, or marketplace selling).
• Device & usage data: IP address, device/browser type, app version, pages viewed, actions taken, and approximate location derived from IP, collected via logs, cookies, and similar technologies.
• Communications: support tickets, disputes, and messages you send us.
• Push subscription data: if you enable notifications, the push endpoint and keys provided by your browser/device.

2. How we use your information

• To create and manage your account and provide the Services;
• To process funding, orders, refunds, and marketplace transactions;
• To route orders to Suppliers and fulfil purchases;
• To detect, prevent, and investigate fraud, abuse, and security incidents;
• To comply with legal, tax, AML, and regulatory obligations;
• To send service messages, order/status updates, and (where enabled) push notifications and important emails;
• To provide support and resolve disputes;
• To improve, secure, and develop the Services.

3. Legal bases for processing

Where applicable, we rely on: performance of a contract (to deliver the Services you request); consent (e.g. push notifications, optional communications); legitimate interests (security, fraud prevention, improving the Services); and legal obligation (tax, AML, lawful requests). You may withdraw consent at any time without affecting prior processing.

4. How we share information

We do not sell your personal information. We share it only as needed:

• Suppliers — order targets/parameters required to fulfil SMM services.
• Payment & crypto processors — to process funding and verify deposits.
• Marketplace partners/sellers — limited data needed to fulfil a purchase or resolve a dispute.
• Service providers — hosting, email delivery, analytics, and security vendors acting on our instructions.
• Legal & safety — to comply with law, enforce our Terms, or protect rights, property, or safety.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Cookies & similar technologies

We use strictly necessary cookies and local storage to keep you signed in, remember preferences, secure the Services (e.g. CSRF protection), and operate the app. We may use limited analytics to understand usage. You can control cookies through your browser, but disabling essential cookies may break core functionality.

6. Data retention

We retain personal data for as long as your account is active and as needed to provide the Services, then for the period required to comply with legal, accounting, tax, and dispute-resolution obligations, after which it is deleted or anonymised. Transaction and AML records may be retained for the minimum periods required by law.

7. Security

We use technical and organisational measures including encryption in transit, hashed passwords, encrypted storage of sensitive credentials, access controls, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.

If a personal-data breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and, where required by law, affected users without undue delay.

8. International transfers

We and our service providers may process data in countries other than your own. Where we transfer personal data internationally, we take steps to ensure an adequate level of protection consistent with applicable law.

9. Your rights

Subject to applicable law, you may have the right to access, correct, update, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent at any time (without affecting prior lawful processing). To exercise these rights, contact privacy@sureboostapp.com; we will respond within the timeframe required by applicable law. We may need to verify your identity before acting and may decline requests where an exception applies (for example, where we must retain data to comply with law).

You also have the right to lodge a complaint with your data-protection authority — for example, the Nigeria Data Protection Commission (NDPC), the Data Protection Commission (Ghana), the Office of the Data Protection Commissioner (Kenya), the Information Regulator (South Africa), or the authority in your country.

10. Children

The Services are not directed to, and may not be used by, anyone under eighteen (18). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Third-party links

The Services may link to third-party sites and platforms that have their own privacy practices. We are not responsible for those practices; review their policies separately.

12. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date reflects the latest version, and material changes may be notified in-app or by email. Continued use after changes constitutes acceptance.

13. Contact

For privacy questions or to exercise your rights, contact us at privacy@sureboostapp.com or https://sureboostapp.com.