Privacy Policy
Last updated 5 October 2026
This explains what Flixerpay collects about you, why we have it, who else sees it, and how to get a copy or have it erased. It is written to meet the Nigeria Data Protection Act 2023 and the NDPR.
Two things we never hold. We do not hold your money. Every naira sits in your Uphiva wallet, and we only record what a campaign is worth. And we never store your card number: Paystack holds the card and gives us a reference. We also never see your Uphiva password.
Contents
1. Who we are
Flixerpay is a Nigerian social-campaign marketplace, operated as part of the Uphiva ecosystem. For the data described here, Flixerpay is the data controller.
Uphiva provides your sign-in and your wallet, and is a separate controller for that. What Uphiva does with your data is covered by Uphiva's own privacy policy, not this one.
Data protection enquiries: privacy@flixerpay.com.
2. What we collect
| From Uphiva when you sign in | Your name, email address, Uphiva user ID, and profile photo if you have one. We never receive your Uphiva password. |
|---|---|
| Your profile | Handle, bio, niches, location, languages, and the social accounts you connect. |
| Marketplace activity | Workspaces and brands you create, campaigns you post or claim, briefs, deliverable links, submissions, approvals, rejections, reviews, ratings, messages between a brand and a creator, and disputes. |
| Studio content | Posts you draft and schedule, uploaded images and video, captions, calendars, and the publish history of each post. |
| Earnings records | What a campaign was worth, what was approved, the take rate applied, and XP and Flexcoin awarded. Amounts, not funds. |
| Subscriptions | Plan, status, renewal dates, and a Paystack customer and transaction reference. Never a card number. |
| WhatsApp TV | Channel details, subscriber figures, rate cards, and the evidence you submit for verification. |
| Without an account | If you enter a campaign without an account, your name, email address, WhatsApp number, the link to your entry and any answer you give. The brand sees your name and your entry, and your email and number only if you choose to share them with it (section 4); we use them to tell you whether you were selected. If you book a WhatsApp TV without an account, your name, email address and WhatsApp number, so we can send your private booking link and the channel can reach you. |
| Visits to our websites | When you open a page on flixerpay.com or app.flixerpay.com we record which page it was, the site that sent you there (such as a search engine), any campaign (UTM) tags in the link, your country, whether you are on a phone or a computer, how long you stayed and how far you scrolled, and how quickly the page loaded. We use no cookies for this. Your IP address and browser are combined into a pseudonym that changes every day, and the IP address itself is not stored. |
| Technical and security | IP address, device and browser information, sign-in times, pages requested, and error reports. Used for security, rate limiting and fixing faults. |
| Fraud prevention | Every time you sign up or sign in, we record a few signals so that one person running many accounts can be spotted: your network address and the wider range (prefix) it belongs to, a browser identifier cookie, characteristics of your device and browser (including a fingerprint of how your browser opens secure connections), your Uphiva account identifier, a normalised form of your email address so that small variations of one address are recognised as the same, and, when you pay by card, a card identifier from our payment provider (never the card number). We store these as keyed hashes, not as the raw values, which lets us see that two accounts share something without keeping the thing itself. At sign-up we also keep, as plain text, the country, region and city our hosting provider estimates from your network, and whether the network or email domain is on public lists of hosting, VPN, Tor or disposable-email services. We compare these signals with other accounts when a referral reward, a referral commission or a payout is involved. |
| Audit records | A tamper-evident log of sensitive actions: moderation decisions, verifications, staff access, role changes. |
| Support | Anything you send us when you report a problem or ask for help. |
We do not ask for, and you should not send us, government ID numbers, BVN, bank account numbers or health information.
3. Why we have it, and our lawful basis
| Running the marketplace | Performance of our contract with you. You cannot claim a campaign or be paid for it without this. |
|---|---|
| Showing your profile to brands | Performance of our contract. Your public profile, handle, niches and approved work are visible to others by design. |
| Taking subscription payments | Performance of our contract, and our legal obligation to keep financial records. |
| Security, fraud and abuse prevention | Our legitimate interest in a marketplace that is not being gamed, and our legal obligations. This covers the referral checks described in section 7. |
| Moderation and verification | Legitimate interest in trust between strangers transacting. |
| Measuring visits to our websites | Our legitimate interest in knowing which pages are read and how people find us. We keep it to what that needs: no cookies, and a pseudonym that changes daily in place of your IP address. If your browser sends a Global Privacy Control signal, we do not measure your visits to flixerpay.com at all. |
| Service email you cannot switch off | Performance of our contract: a claim approved, a deadline, a payment released. |
| Marketing email | Your consent. Withdraw it at any time; it does not affect service email. |
| Publishing to your social accounts | Your consent, given when you connect the account, withdrawn when you disconnect it. |
4. Who we share it with
We do not sell your personal data. We share it only with the following, and only as far as each needs:
| Other users | A brand sees the profile, submission and messages of a creator who claims its campaign, and the reverse. Reviews and leaderboard positions are public. |
|---|---|
| The brand running a campaign you enter without an account | Your name and your entry. Your email address and WhatsApp number only if you tick the separate, optional box on the entry form that names that brand. Your entry counts the same if you do not. Once shared, the brand is responsible for how it uses them, under its own privacy terms. You can stop sharing from your entry link at any time; the brand then no longer sees them on Flixerpay, but a copy it already exported stays with the brand, so ask it to delete that too. |
| Uphiva | Identity and wallet. Funding, releases and balances happen there. |
| Paystack | Subscription payments. They receive your card details directly. We never see them. |
| Resend | Sending email. |
| Unipile, X, Meta, TikTok | Only when you connect an account, and only to publish what you tell us to. |
| Anthropic | AI drafting (see below). |
| Vercel and Neon | Hosting and the database. |
| Authorities | Where the law requires it, or to protect someone's safety or our legal rights. |
5. Connected social accounts
When you connect X, LinkedIn, Instagram or another network, we store an access token so Studio can publish on your instruction. Tokens are encrypted at rest and are used only for the actions you ask for. We read back public metrics on your own posts to show you how they performed. We do not read your private messages, and we do not post anything you did not schedule.
Disconnect an account at any time in Studio → Accounts. That deletes the stored token immediately. Revoking access from the platform's own settings works too.
6. AI features
Studio can draft captions and suggest ideas. To do that, the brief, your brand voice notes and the relevant campaign text are sent to Anthropic to generate a suggestion. We do not send your contact details, your earnings, or your private messages. Suggestions are drafts. Nothing is published without you.
7. Automated decisions
We score referrals, referral rewards and commissions automatically, using the fraud-prevention signals in section 2 together with patterns such as timing and how accounts are linked to each other. A score is evidence for a person to weigh. A few things do happen automatically, under fixed rules:
- an invite is not credited when the new account uses the same email address as the person who invited it, once small variations (dots, or a +tag, in a Gmail address) are set aside;
- the person who invited you earns no referral reward from a payment well below the plan's price (for example a first month bought with a large discount) or from a trial; you keep everything you paid for, and a later full-price payment earns it;
- referral and review commissions on one campaign claim never add up to more than the fee Flixerpay collected on it, so a commission past that limit is not recorded;
- a referral reward or a commission payout can be placed on a temporary hold while it is checked, for example when its score is high or someone has earned an unusual number of rewards in a short time. A hold takes nothing away: the reward stays recorded, some checks clear on their own, and the rest are decided by a person. We tell you when this happens.
Section 37 of the Nigeria Data Protection Act 2023 protects you from decisions with legal or similarly significant effects that are made by automated means alone. Removing a reward you have already received, cancelling a commission, blocking a referral code, restricting or closing an account is always decided by a member of our team, with a written reason, and we tell you when a reward or commission is removed.
You can contest any of this, give your side of it, and ask a person to look again: use Ask for a review on your Invite a friend page (you can write what happened), or email privacy@flixerpay.com. A person answers an appeal within a few working days.
8. Cookies
We keep this small. We use:
- a session cookie, so you stay signed in (the service cannot work without it);
- preference cookies that remember your theme, your currency and whether balances are blurred;
- short-lived security cookies used during sign-in to prevent request forgery;
- two referral cookies, flx_ref and flx_ref_at, set when you follow someone's invite link. They record whose link it was and when you followed it, so the right person is credited if you sign up, and each lasts 30 days;
- a browser identifier cookie, flx_bid, holding a random value that helps us notice many accounts or reward claims coming from one browser. It is used only for fraud prevention (see section 7) and lasts 12 months.
We do not use advertising cookies, and we do not let third parties track you across other sites from here.
Measuring visits to flixerpay.com and app.flixerpay.com uses no cookies and stores nothing in your browser.
9. How long we keep it
| What | How long we keep it |
|---|---|
| Your profile, campaigns and Studio content | While your account is open |
| Financial and tax records | Up to 6 years, as Nigerian law requires, even after you leave |
| Records of individual website visits | 60 days as standard, and never more than 12 months. After that we keep only daily totals, which identify nobody |
| Campaign entries made without an account | Deleted 90 days after you enter if you are not selected. If you are selected and never sign in, 180 days. Once you sign in, your entry becomes part of your account |
| Security logs | Normally up to 12 months |
| Fraud-prevention identifiers and sign-up location (section 2) | 90 days, on a rolling basis. Longer only while a case about you is open for a person to look at, and then for 12 months after a person decides it |
| Fraud case records (scores, decisions, appeals) | 12 months after a person decides the case, or after its last automatic check if nobody needed to |
| Audit records | Kept as a tamper-evident chain. After erasure these hold only an identifier that no longer refers to anybody (see below) |
| Backups | Deleted data ages out of backups within 30 days |
10. Your rights
Under the Nigeria Data Protection Act you may ask us to: give you a copy of your data; correct it; delete it; restrict or object to how we use it; or send it to someone else in a portable format. You may also withdraw consent at any time, contest a decision about a referral reward (see section 7), and complain to the Nigeria Data Protection Commission.
Most of this is self-serve in the app under Settings → Privacy. Otherwise email privacy@flixerpay.com and we will respond within 30 days. We do not charge for this, and we will not treat you worse for asking.
11. Getting your data deleted
You can delete your Flixerpay account and the personal data attached to it in two ways:
- In the app, go to Settings, then Privacy, then Delete account.
- By email, write to privacy@flixerpay.com from the address on your account.
Deletion removes your profile, your campaigns and claims, your Studio content and uploads, your messages, your connected-account tokens, and the reviews you wrote. It is permanent and cannot be undone.
Three things survive, and we would rather say so plainly. Financial records we are legally required to keep are retained for the period above. Entries in our tamper-evident audit log keep a bare identifier. It refers to no person once your account is gone, and removing it would break the chain that detects a real intruder. And fraud-prevention records (the keyed hashes, sign-up location and case records in sections 2 and 7) are kept for the periods above even after you delete your account, because otherwise deleting an account would be a way to escape a fraud check; they are then deleted on that schedule.
Deleting your Flixerpay account does not delete your Uphiva account or wallet. Ask Uphiva separately for that.
12. How we protect it
Traffic is encrypted in transit. Credentials and social tokens are encrypted at rest. Access by our staff is limited to those who need it and is written to the audit log. We apply a strict content security policy, rate-limit sensitive endpoints, and keep the powers that sit above a workspace separate from any customer account. No system is perfectly secure, but if a breach affects you we will notify you and the Commission as the law requires.
13. Transfers outside Nigeria
Some providers above (hosting, email, AI) process data outside Nigeria. Where they do, we rely on the safeguards the Act permits, including contractual protections with each provider, and we send them only what the feature needs.
14. Children
Flixerpay is for people aged 18 and over. We do not knowingly collect data about children. If you believe a child has an account, tell us and we will remove it.
15. Changes and contact
If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top always shows the current version.
Privacy and data protection: privacy@flixerpay.com
Anything else: hello@flixerpay.com