Privacy Policy

Boostfest runs this website, where you buy followers, likes, views and plays for your social media and pay in naira.

In this policy, "we" means Boostfest and "you" means anyone who uses the website. We decide how your information is used, which makes us its controller under the Nigeria Data Protection Act 2023.

What you give us

• Your details: name, email, and phone number if you add one.
• Your password, stored only in a scrambled form that can't be turned back into the password.
• Links and usernames you order for or save, like instagram.com/yourname.
• The name on your bank account when you top up by manual bank transfer, so we can find your transfer on our statement.
• Reviews you give an order: the stars, what you write, and whether to show your first name.
• Messages you send us on WhatsApp or by email.

What we record as you use Boostfest

• Your orders, top ups and wallet history, including refills, promo codes and who invited you.
• Devices you're logged in on, named by browser and system, like "Chrome on Mac".
• Your IP address, kept for one day to stop password guessing.
• An alerts address for your phone, if you turn on phone alerts.
• Your settings, like dark mode and whether you want offers.
• Your ad cookie IDs, IP address and device when you start a manual bank transfer, only if you said yes to ad cookies. They're kept with the transfer until we tell Meta and TikTok it was approved, and 3 days at most.

What others tell us

Flutterwave tells us whether a card or bank payment went through, with its reference. Their reply also has details they hold about the payment, like the name, email and phone number it was made with, the IP address it came from, and the card's type with its first 6 and last 4 digits. We never receive your full card number.

We only use your information when the law gives us a reason to. Here's each use and its reason.

A few cookies keep you logged in and remember your settings. They're needed for the website to work, so they're always on.

If you say yes to ad cookies, Meta (Facebook and Instagram) and TikTok also use cookies here. They see which pages you visit, and when you sign up or top up, that it happened and the amount. They use this to show you our ads and to tell us which ones work. We don't give them your name, email or phone, and they never load on pages with private links, like a password reset.

Manual bank transfers are approved by our team later, so their cookies never see those top ups land. When you start one with ad cookies on, we keep your ad cookie IDs, IP address and device with it. Once it's approved, we send them to Meta and TikTok with the amount and a scrambled form of your account number, then delete them. If it isn't approved within 3 days, we delete them without sending anything.

Every cookie we use, and how long it lasts, is on the Cookies page.

We don't sell your information. These companies get the part they need to do a job for us, and nothing more.

Reviews are public. Anyone can see the stars, what you wrote, what you bought, the date, and your first name if you chose to show it. Never your email, phone, account or link.

Some of these companies store data outside Nigeria, for example in the United States or Europe. When they do, we rely on their contracts and safeguards that protect your information the way the Nigeria Data Protection Act requires.

• Everything travels over an encrypted connection (https).
• Passwords are stored scrambled, and repeated wrong guesses are slowed down.
• When your password changes, your other devices are logged out. When your email or password changes, we email you.
• Only the people who run Boostfest can see customer accounts, and only to help customers and run the business.

No system is perfect. If something happens that puts your information at risk, we'll tell you and the Nigeria Data Protection Commission, as the law requires.

Under the Nigeria Data Protection Act, you can:

• See the information we hold about you, and download a copy from Account, under Security.
• Correct it. Most of it you can edit yourself in Account.
• Delete your account, in Account. Your details are erased 30 days later.
• Object to or limit some uses, like offers.
• Withdraw consent for ad cookies, offers or phone alerts at any time.
• Complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

For anything you can't do in Account, contact us below. We reply within 30 days, and usually much sooner.

You must be 16 or older to use Boostfest. We don't knowingly collect information from anyone younger. If you think someone under 16 has made an account, tell us and we'll delete it.

When we change this policy, we update the date at the top. If a change matters to you, we'll tell you by email or in the app before it takes effect.