Privacy Policy
1. Overview
Welcome to Earncial ("we", "us", or "our"). Earncial is operated by Earncial Global (CAC RC No. 9374009), a registered business.
This Privacy Policy explains what personal information we collect, how we use it, who we share it with, how we protect it, and what rights you have over your data when you use the Earncial platform, website, or any related services (collectively, the "Service").
By creating an account or using any part of the Earncial Service, you agree to this Privacy Policy. If you do not agree, please do not use our Service.
Who is the Data Controller?
Earncial Global is the data controller responsible for your personal information collected through the Earncial platform. For privacy-related inquiries, contact us at privacy@earncial.com.
2. Data We Collect
We collect information you provide directly, information collected automatically, and information from third parties.
2.1 — Information You Provide
| Data Type | What We Collect | When Collected |
|---|---|---|
| Account Information | Full name, username, email address, password (hashed), phone number, gender, country | Registration |
| Bank Account Details | Bank name, account number, account holder name | When you add a bank account (earners) |
| Social Media Handles | Platform name and your username on that platform | When you link a handle for task verification |
| Task Submissions | Screenshot images, task completion records | When you submit proof for a task |
| Payment Information | Deposit amounts, transaction references (card details processed by Flutterwave — not stored by us) | Deposits and withdrawals |
| Support Communications | Messages and files you send to our support team | When you contact support |
| Referral Information | Referral codes used at sign-up | Registration |
2.2 — Information Collected Automatically
- Device Information: Device type, operating system, browser type and version
- Usage Data: Pages visited, features used, time spent, clicks, and navigation patterns
- Log Data: IP address, access timestamps, error logs
- Cookies & Tracking: Session cookies, preference cookies (see Section 6)
2.3 — Information from Third Parties
- Flutterwave: Payment transaction status and references (not your full card details)
- Social Media Platforms: We do not access your social media accounts directly — we only record the username you provide and verify it manually
3. How We Use Your Data
We use the personal information we collect for the following purposes:
3.1 — Providing the Service
- Creating and managing your account
- Verifying your social media handles for task eligibility
- Displaying available tasks and matching earners to advertisers
- Processing task submissions and approvals
- Processing deposits and withdrawals
- Calculating and crediting earnings to your balance
- Managing referral commissions
3.2 — Account & Security
- Authenticating your identity when you log in
- Sending password reset emails and security alerts
- Detecting and preventing fraud, abuse, and fake accounts
- Investigating and resolving disputes between earners and advertisers
- Verifying the authenticity of task submission screenshots
3.3 — Communication
- Sending transaction receipts and withdrawal confirmations
- Responding to your support requests
- Sending platform updates, policy changes, and important notices
- Sending optional promotional emails (you may unsubscribe at any time)
3.4 — Platform Improvement
- Analysing usage patterns to improve platform features and performance
- Generating aggregated, anonymised analytics (not linked to you personally)
- Conducting internal research and quality assurance
3.5 — Legal Compliance
- Complying with applicable laws and regulations
- Responding to lawful requests from regulatory authorities
- Maintaining records required for business registration (CAC) purposes
4. Data Sharing
We do not sell your personal data to anyone. We share your data only in the limited circumstances described below.
4.1 — Service Providers
| Provider | Purpose | Data Shared |
|---|---|---|
| Flutterwave | Payment processing for deposits | Name, email, amount, transaction reference |
| AWS (Amazon Web Services) | Secure cloud hosting and infrastructure | Account and transaction data (encrypted) |
| Email Service Provider | Sending transactional and support emails | Email address, name |
All service providers are contractually required to process your data only for the specified purpose and to maintain appropriate security standards.
4.2 — Legal Requirements
We may disclose your information if required to do so by law, court order, or in response to a verified request from a regulatory authority or law enforcement agency.
4.3 — Business Transfers
If Earncial is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. We will notify you via email before your data becomes subject to a different privacy policy.
4.4 — With Your Consent
We may share your information in any other way we describe to you at the time of collection, or with your explicit consent.
5. Data Storage & Security
5.1 — How We Store Your Data
- Your data is stored on secure, encrypted servers hosted on AWS (Amazon Web Services) — one of the world's most trusted cloud infrastructure providers
- Passwords are hashed using industry-standard algorithms — we never store plaintext passwords
- Bank account details are encrypted at rest
- Payment card data is never stored on Earncial servers — it is handled entirely by Flutterwave
5.2 — Security Measures
- HTTPS and SSL/TLS encryption for all data transmitted between your device and our servers — your connection to Earncial is always encrypted
- Access controls ensuring only authorised team members can access sensitive data
- Regular security reviews and monitoring for suspicious activity
- Account lockout protection against brute-force login attempts
5.3 — How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Account information | For as long as your account is active + 2 years after deletion |
| Transaction records | 7 years (legal/tax requirement) |
| Task submission screenshots | 90 days after approval/rejection |
| Support communications | 3 years |
| Log files | 12 months |
| Marketing preferences | Until you unsubscribe or delete your account |
5.4 — Withdrawal PIN Security
Your Withdrawal PIN is stored using one-way encryption (hashing). This means it cannot be retrieved, read, or viewed by any member of the Earncial team — including platform administrators and the platform owner. If you forget your PIN, it cannot be recovered; it can only be reset (deleted) after extensive identity verification. See our FAQ for the full PIN reset process.
5.5 — Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, Earncial will:
- Notify the relevant data protection authority within 72 hours of becoming aware of the breach, where required by applicable law
- Notify affected users without undue delay if the breach is likely to result in a high risk to their rights — by email to their registered address
- Take immediate steps to contain the breach and prevent further unauthorised access
- Conduct a full investigation and document the breach, the steps taken, and the outcome
6. Cookies & Tracking
We use cookies and similar tracking technologies to operate and improve the Earncial platform.
Types of Cookies We Use
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential / Session | Keeping you logged in, maintaining your session securely | No — required for the platform to work |
| Preference | Remembering your dark/light mode setting and language preference | Yes |
| Analytics | Understanding how users navigate the platform (aggregated, anonymous) | Yes |
| Security | CSRF protection tokens to prevent malicious attacks | No — required for security |
You can manage or disable non-essential cookies through your browser settings. For full details, see our Cookie Policy.
7. Your Rights
You have the following rights over your personal data. To exercise any of these rights, contact us at privacy@earncial.com.
How to Request Account Deletion
To permanently delete your Earncial account and associated data:
- Ensure your wallet balance is zero — withdraw any remaining earnings before requesting deletion
- Submit a support ticket via the My Tickets page in your dashboard, or email privacy@earncial.com with the subject "Account Deletion Request"
- Include your registered email address and username to confirm your identity
- We will process your request within 14 days and confirm deletion by email
8. GDPR Compliance
Earncial is committed to compliance with the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA) and the United Kingdom, and with equivalent data protection laws in other jurisdictions.
Legal Bases for Processing
| Processing Activity | Legal Basis |
|---|---|
| Creating and managing your account | Performance of a contract (Article 6(1)(b)) |
| Processing payments and withdrawals | Performance of a contract (Article 6(1)(b)) |
| Verifying social media handles | Performance of a contract (Article 6(1)(b)) |
| Fraud prevention and security | Legitimate interests (Article 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Article 6(1)(c)) |
| Sending marketing emails | Consent (Article 6(1)(a)) |
| Analytics and platform improvement | Legitimate interests (Article 6(1)(f)) |
International Data Transfers
Your data may be processed in countries outside your own. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities.
Data Protection Officer
For GDPR-related enquiries, contact our data protection team at privacy@earncial.com with the subject line "GDPR Request". We will respond within 30 days.
8b. Nigeria Data Protection Act (NDPA) 2023
As a business registered in Nigeria (CAC RC No. 9374009), Earncial is fully committed to compliance with the Nigeria Data Protection Act (NDPA) 2023 and the regulations issued by the Nigeria Data Protection Commission (NDPC).
Our Obligations Under NDPA 2023
- Lawful processing: We process your personal data only on lawful grounds — contractual necessity, legitimate interests, legal obligation, or your consent
- Data minimisation: We collect only the data that is necessary for the purpose it is being collected
- Purpose limitation: Data collected for one purpose will not be used for an unrelated purpose without your knowledge
- Accuracy: We take reasonable steps to ensure personal data we hold is accurate and up to date
- Storage limitation: We retain data only for as long as necessary — see the retention table in Section 5.3
- Security: We implement appropriate technical and organisational measures to protect your data
- Accountability: We maintain records of our data processing activities as required by the NDPA
Your Rights Under NDPA 2023
As a Nigerian data subject, you have the right to:
- Be informed about how your data is processed
- Access your personal data held by us
- Correct inaccurate or incomplete data
- Delete your data (subject to legal retention obligations)
- Object to processing of your data
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng if you believe your rights have been violated
9. Children's Privacy
Earncial is strictly for users aged 18 and above. We do not knowingly collect personal information from anyone under 18 years of age.
By creating an account on Earncial, you confirm that you are at least 18 years old. If we discover that we have inadvertently collected personal data from a person under 18, we will delete that data immediately and close the associated account.
10. Third-Party Services
The Earncial platform integrates with or links to third-party services. This policy does not cover how those third parties handle your data. We encourage you to review their privacy policies.
Key Third-Party Integrations
| Service | Purpose | Their Privacy Policy |
|---|---|---|
| Flutterwave | Payment processing for advertiser deposits | flutterwave.com/privacy-policy |
| Social Media Platforms | Task destinations (Instagram, TikTok, YouTube, etc.) | Each platform's own privacy policy applies |
| Google Fonts | Typography rendering (Poppins font) | policies.google.com/privacy |
External Links
Our platform may contain links to external websites. We are not responsible for the privacy practices or content of those sites. Clicking an external link means you are leaving Earncial and their own policies apply.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
When we make changes:
- The "Last updated" date at the top of this page will be revised
- For material changes, we will notify you by email to your registered address or by displaying a prominent notice on the platform
- Minor clarifications may be made without direct notification
Your continued use of the Earncial Service after any changes to this policy constitutes your acceptance of the updated policy. If you do not agree with any changes, you should stop using the Service and may request account deletion.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
| Contact Method | Details |
|---|---|
| 📧 General Privacy Enquiries | privacy@earncial.com |
| ⚖️ GDPR Requests | privacy@earncial.com — Subject: "GDPR Request" |
| 🚨 Data Breach / Security | privacy@earncial.com — Subject: "Security Concern" |
| 🧒 Child Safety | privacy@earncial.com — Subject: "Child Account" |
| 🏢 Business / CAC | Earncial Global · CAC RC No. 9374009 |
We aim to respond to all privacy-related enquiries within 5 business days, and to all formal data rights requests within 30 days as required by applicable law.