Privacy Policy

Effective Date: 25 July 2026

This Privacy Policy explains how GadaFundAm.com ("GadaFundAm", "we", "our", or "us") collects, uses, shares, and protects your personal information when you use our crowdfunding platform. We are committed to handling your data responsibly and in accordance with the Nigeria Data Protection Act 2023 (NDPA) and other applicable laws.

By using GadaFundAm.com, you consent to the practices described in this Policy. If you do not agree, please discontinue use of the Platform.

1. Information We Collect

We collect information you provide directly, information generated as you use the Platform, and information from trusted third parties.

a. Information you provide

  • Account details — name, username, email address, phone number, and password.
  • Profile and demographic details — bio, avatar, gender, date of birth, occupation, state of origin, state of residence, and preferred language.
  • Creator verification (KYC) — full legal name, government-issued ID (NIN, driver's licence, passport, or voter's card), residential address, and an optional selfie.
  • Payout details — bank name, bank code, and account number, together with the account name confirmed through Account Name Enquiry.
  • Campaign content — titles, descriptions, media, rewards, milestones, updates, and evidence you upload.
  • Communications — messages, comments, and support enquiries.

b. Information collected automatically

  • Usage data — pages viewed, campaigns visited, and actions taken.
  • Device and log data — IP address (stored in hashed form for campaign views), browser type, and referring source.
  • Approximate location — when you sign in, we derive your approximate location (country, region and city) from your IP address to understand where our community connects from. This is an estimate only; we do not track your precise or real-time location.
  • Cookies and similar technologies — used to keep you signed in, remember preferences, and protect against fraud.

c. Information from third parties

  • Payment processors (e.g. Paystack) — transaction references, status, and payment channel. We never receive or store your full card details.
  • Identity and bank verification providers — confirmation of your identity and account name.

2. How We Use Your Information

We use your information to:

  • Create and manage your account.
  • Verify the identity of creators and the ownership of payout accounts.
  • Process contributions and release milestone payouts.
  • Operate, secure, and improve the Platform.
  • Detect, prevent, and investigate fraud and abuse.
  • Send transactional messages and, where permitted, updates and notifications.
  • Produce anonymised, aggregate analytics about our community.
  • Comply with legal and regulatory obligations.

3. Legal Bases for Processing

We process personal data where it is necessary to perform our contract with you, where we have a legitimate interest (such as security and platform improvement), where you have given consent (such as optional marketing emails), and where we are required to comply with a legal obligation.

4. Cookies

We use only strictly necessary (essential) cookies to run the platform — for keeping you signed in, protecting forms against fraud, and defending against bots. We do not use advertising, marketing, or third-party tracking cookies (such as Google Analytics). The cookies we set are:

  • gadafundam_session — keeps your session active and remembers that you're signed in.
  • XSRF-TOKEN — protects every form submission against cross-site request forgery (CSRF).
  • remember_web_* — set only if you choose "Remember me" at login, so you stay signed in on your device.
  • cf_* (Cloudflare Turnstile) — set on sign-in pages when our bot-protection check is enabled, to distinguish humans from automated abuse.

Because these cookies are essential to the service, they do not require consent, but you can control or clear cookies through your browser settings. Disabling essential cookies may prevent core features (such as logging in) from working.

5. How We Share Information

We do not sell your personal information. We share it only as follows:

  • Service providers — payment processors, identity and bank verification providers, hosting, email delivery, and analytics, acting on our instructions.
  • Publicly, by your choice — your public creator or backer profile, campaign content, and non-anonymous contributions are visible to others.
  • Legal and safety — where required by law, regulation, or valid legal process, or to protect the rights and safety of our users and the Platform.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Aggregate Analytics

We generate statistics — such as demographics, geographic distribution, and banking usage — in anonymised, aggregate form only. Individual users' banking details and personal records are never exposed in analytics.

Our geographic analytics include the approximate location derived from members' login IP addresses. This is used to understand where our community connects from and is never used to identify or locate an individual.

7. Data Retention

We retain personal data for as long as your account is active and as needed to provide the Platform. Verification and financial records may be retained for longer where required for legal, accounting, or fraud-prevention purposes. When data is no longer required, it is securely deleted or anonymised.

8. Data Security

We apply appropriate technical and organisational measures to protect your data, including encrypted passwords, restricted access controls, private storage for verification documents, audit logging, rate limiting, and secure transport (HTTPS). No system is completely secure, but we work continuously to safeguard your information.

9. Your Rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your data, where permitted.
  • Object to or restrict certain processing.
  • Withdraw consent, where processing is based on consent.
  • Request a copy of your data in a portable format.
  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, contact us using the details below.

10. Children's Privacy

GadaFundAm is not intended for anyone under eighteen (18) years of age. We do not knowingly collect personal data from children. If we learn that we have, we will delete it promptly.

11. International Transfers

Some of our service providers may process data outside Nigeria. Where this occurs, we take steps to ensure your data receives an adequate level of protection consistent with applicable law.

12. Third-Party Links

The Platform may link to third-party websites and services. We are not responsible for their privacy practices, and we encourage you to review their policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions take effect upon publication on GadaFundAm.com. Your continued use of the Platform constitutes acceptance of the revised Policy.

14. Contact Us

For questions or requests relating to this Privacy Policy, please contact:

GadaFundAm.com
Website: https://gadafundam.com
Email: privacy@gadafundam.com