Home › Privacy Policy

Privacy Policy

Effective: August 10, 2025 Last updated: January 1, 2026 CAC RC No. 9374009 GDPR Compliant

1. Overview

Welcome to Earncial ("we", "us", or "our"). Earncial is operated by Earncial Global (CAC RC No. 9374009), a registered business.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, how we protect it, and what rights you have over your data when you use the Earncial platform, website, or any related services (collectively, the "Service").

By creating an account or using any part of the Earncial Service, you agree to this Privacy Policy. If you do not agree, please do not use our Service.

💡 This policy applies to all users of Earncial — both Earners (individuals completing tasks) and Advertisers (individuals or businesses posting tasks).

Who is the Data Controller?

Earncial Global is the data controller responsible for your personal information collected through the Earncial platform. For privacy-related inquiries, contact us at privacy@earncial.com.

2. Data We Collect

We collect information you provide directly, information collected automatically, and information from third parties.

2.1 — Information You Provide

Data Type What We Collect When Collected
Account Information Full name, username, email address, password (hashed), phone number, gender, country Registration
Bank Account Details Bank name, account number, account holder name When you add a bank account (earners)
Social Media Handles Platform name and your username on that platform When you link a handle for task verification
Task Submissions Screenshot images, task completion records When you submit proof for a task
Payment Information Deposit amounts, transaction references (card details processed by Flutterwave — not stored by us) Deposits and withdrawals
Support Communications Messages and files you send to our support team When you contact support
Referral Information Referral codes used at sign-up Registration

2.2 — Information Collected Automatically

  • Device Information: Device type, operating system, browser type and version
  • Usage Data: Pages visited, features used, time spent, clicks, and navigation patterns
  • Log Data: IP address, access timestamps, error logs
  • Cookies & Tracking: Session cookies, preference cookies (see Section 6)

2.3 — Information from Third Parties

  • Flutterwave: Payment transaction status and references (not your full card details)
  • Social Media Platforms: We do not access your social media accounts directly — we only record the username you provide and verify it manually
⚠️ We never store full card numbers, CVV codes, or PINs. All payment card data is handled exclusively by Flutterwave's PCI-DSS certified infrastructure.

3. How We Use Your Data

We use the personal information we collect for the following purposes:

3.1 — Providing the Service

  • Creating and managing your account
  • Verifying your social media handles for task eligibility
  • Displaying available tasks and matching earners to advertisers
  • Processing task submissions and approvals
  • Processing deposits and withdrawals
  • Calculating and crediting earnings to your balance
  • Managing referral commissions

3.2 — Account & Security

  • Authenticating your identity when you log in
  • Sending password reset emails and security alerts
  • Detecting and preventing fraud, abuse, and fake accounts
  • Investigating and resolving disputes between earners and advertisers
  • Verifying the authenticity of task submission screenshots

3.3 — Communication

  • Sending transaction receipts and withdrawal confirmations
  • Responding to your support requests
  • Sending platform updates, policy changes, and important notices
  • Sending optional promotional emails (you may unsubscribe at any time)

3.4 — Platform Improvement

  • Analysing usage patterns to improve platform features and performance
  • Generating aggregated, anonymised analytics (not linked to you personally)
  • Conducting internal research and quality assurance

3.5 — Legal Compliance

  • Complying with applicable laws and regulations
  • Responding to lawful requests from regulatory authorities
  • Maintaining records required for business registration (CAC) purposes
💡 We process your data based on the following legal grounds: performance of a contract (to provide the Service), legitimate interests (fraud prevention, security), legal obligation (compliance), and consent (marketing emails).

4. Data Sharing

We do not sell your personal data to anyone. We share your data only in the limited circumstances described below.

4.1 — Service Providers

ProviderPurposeData Shared
Flutterwave Payment processing for deposits Name, email, amount, transaction reference
AWS (Amazon Web Services) Secure cloud hosting and infrastructure Account and transaction data (encrypted)
Email Service Provider Sending transactional and support emails Email address, name

All service providers are contractually required to process your data only for the specified purpose and to maintain appropriate security standards.

4.2 — Legal Requirements

We may disclose your information if required to do so by law, court order, or in response to a verified request from a regulatory authority or law enforcement agency.

4.3 — Business Transfers

If Earncial is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. We will notify you via email before your data becomes subject to a different privacy policy.

4.4 — With Your Consent

We may share your information in any other way we describe to you at the time of collection, or with your explicit consent.

We never sell your personal data. We never share your data with advertisers on the platform for marketing purposes without your explicit consent.

5. Data Storage & Security

5.1 — How We Store Your Data

  • Your data is stored on secure, encrypted servers hosted on AWS (Amazon Web Services) — one of the world's most trusted cloud infrastructure providers
  • Passwords are hashed using industry-standard algorithms — we never store plaintext passwords
  • Bank account details are encrypted at rest
  • Payment card data is never stored on Earncial servers — it is handled entirely by Flutterwave

5.2 — Security Measures

  • HTTPS and SSL/TLS encryption for all data transmitted between your device and our servers — your connection to Earncial is always encrypted
  • Access controls ensuring only authorised team members can access sensitive data
  • Regular security reviews and monitoring for suspicious activity
  • Account lockout protection against brute-force login attempts

5.3 — How Long We Keep Your Data

Data TypeRetention Period
Account informationFor as long as your account is active + 2 years after deletion
Transaction records7 years (legal/tax requirement)
Task submission screenshots90 days after approval/rejection
Support communications3 years
Log files12 months
Marketing preferencesUntil you unsubscribe or delete your account
⚠️ While we implement strong security measures, no system is 100% impenetrable. If you suspect your account has been compromised, change your password immediately and contact privacy@earncial.com.

5.4 — Withdrawal PIN Security

Your Withdrawal PIN is stored using one-way encryption (hashing). This means it cannot be retrieved, read, or viewed by any member of the Earncial team — including platform administrators and the platform owner. If you forget your PIN, it cannot be recovered; it can only be reset (deleted) after extensive identity verification. See our FAQ for the full PIN reset process.

5.5 — Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, Earncial will:

  • Notify the relevant data protection authority within 72 hours of becoming aware of the breach, where required by applicable law
  • Notify affected users without undue delay if the breach is likely to result in a high risk to their rights — by email to their registered address
  • Take immediate steps to contain the breach and prevent further unauthorised access
  • Conduct a full investigation and document the breach, the steps taken, and the outcome
💡 To report a suspected security incident or data breach, email privacy@earncial.com with the subject line "Security Concern" immediately.

6. Cookies & Tracking

We use cookies and similar tracking technologies to operate and improve the Earncial platform.

Types of Cookies We Use

Cookie TypePurposeCan Be Disabled?
Essential / Session Keeping you logged in, maintaining your session securely No — required for the platform to work
Preference Remembering your dark/light mode setting and language preference Yes
Analytics Understanding how users navigate the platform (aggregated, anonymous) Yes
Security CSRF protection tokens to prevent malicious attacks No — required for security

You can manage or disable non-essential cookies through your browser settings. For full details, see our Cookie Policy.

7. Your Rights

You have the following rights over your personal data. To exercise any of these rights, contact us at privacy@earncial.com.

👁️
Right to Access
You can request a copy of all personal data we hold about you at any time.
✏️
Right to Rectification
You can request correction of any inaccurate or incomplete personal information.
🗑️
Right to Erasure
You can request deletion of your personal data, subject to legal retention requirements.
⏸️
Right to Restriction
You can request that we limit how we use your data in certain circumstances.
📦
Right to Portability
You can request your data in a structured, machine-readable format to transfer to another service.
🚫
Right to Object
You can object to processing based on legitimate interests, including direct marketing.
↩️
Withdraw Consent
Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
📧
Unsubscribe
You can unsubscribe from marketing emails at any time using the unsubscribe link or by contacting support.
💡 We will respond to all valid data rights requests within 30 days. We may need to verify your identity before processing certain requests.

How to Request Account Deletion

To permanently delete your Earncial account and associated data:

  1. Ensure your wallet balance is zero — withdraw any remaining earnings before requesting deletion
  2. Submit a support ticket via the My Tickets page in your dashboard, or email privacy@earncial.com with the subject "Account Deletion Request"
  3. Include your registered email address and username to confirm your identity
  4. We will process your request within 14 days and confirm deletion by email
⚠️ Account deletion is permanent and irreversible. All your data, task history, and balance will be deleted. Note that transaction records may be retained for up to 7 years as required by Nigerian financial law.

8. GDPR Compliance

Earncial is committed to compliance with the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA) and the United Kingdom, and with equivalent data protection laws in other jurisdictions.

Legal Bases for Processing

Processing ActivityLegal Basis
Creating and managing your accountPerformance of a contract (Article 6(1)(b))
Processing payments and withdrawalsPerformance of a contract (Article 6(1)(b))
Verifying social media handlesPerformance of a contract (Article 6(1)(b))
Fraud prevention and securityLegitimate interests (Article 6(1)(f))
Complying with legal obligationsLegal obligation (Article 6(1)(c))
Sending marketing emailsConsent (Article 6(1)(a))
Analytics and platform improvementLegitimate interests (Article 6(1)(f))

International Data Transfers

Your data may be processed in countries outside your own. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities.

Data Protection Officer

For GDPR-related enquiries, contact our data protection team at privacy@earncial.com with the subject line "GDPR Request". We will respond within 30 days.

✅ If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.

8b. Nigeria Data Protection Act (NDPA) 2023

As a business registered in Nigeria (CAC RC No. 9374009), Earncial is fully committed to compliance with the Nigeria Data Protection Act (NDPA) 2023 and the regulations issued by the Nigeria Data Protection Commission (NDPC).

Our Obligations Under NDPA 2023

  • Lawful processing: We process your personal data only on lawful grounds — contractual necessity, legitimate interests, legal obligation, or your consent
  • Data minimisation: We collect only the data that is necessary for the purpose it is being collected
  • Purpose limitation: Data collected for one purpose will not be used for an unrelated purpose without your knowledge
  • Accuracy: We take reasonable steps to ensure personal data we hold is accurate and up to date
  • Storage limitation: We retain data only for as long as necessary — see the retention table in Section 5.3
  • Security: We implement appropriate technical and organisational measures to protect your data
  • Accountability: We maintain records of our data processing activities as required by the NDPA

Your Rights Under NDPA 2023

As a Nigerian data subject, you have the right to:

  • Be informed about how your data is processed
  • Access your personal data held by us
  • Correct inaccurate or incomplete data
  • Delete your data (subject to legal retention obligations)
  • Object to processing of your data
  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng if you believe your rights have been violated
✅ Earncial is operated by Earncial Global, a CAC-registered Nigerian business (RC No. 9374009). We are committed to full compliance with Nigerian data protection law in addition to international standards.

9. Children's Privacy

Earncial is strictly for users aged 18 and above. We do not knowingly collect personal information from anyone under 18 years of age.

By creating an account on Earncial, you confirm that you are at least 18 years old. If we discover that we have inadvertently collected personal data from a person under 18, we will delete that data immediately and close the associated account.

⚠️ If you are a parent or guardian and believe your child under 18 has created an Earncial account, please contact us immediately at privacy@earncial.com and we will take swift action to remove the account and all associated data.

10. Third-Party Services

The Earncial platform integrates with or links to third-party services. This policy does not cover how those third parties handle your data. We encourage you to review their privacy policies.

Key Third-Party Integrations

ServicePurposeTheir Privacy Policy
Flutterwave Payment processing for advertiser deposits flutterwave.com/privacy-policy
Social Media Platforms Task destinations (Instagram, TikTok, YouTube, etc.) Each platform's own privacy policy applies
Google Fonts Typography rendering (Poppins font) policies.google.com/privacy

External Links

Our platform may contain links to external websites. We are not responsible for the privacy practices or content of those sites. Clicking an external link means you are leaving Earncial and their own policies apply.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.

When we make changes:

  • The "Last updated" date at the top of this page will be revised
  • For material changes, we will notify you by email to your registered address or by displaying a prominent notice on the platform
  • Minor clarifications may be made without direct notification

Your continued use of the Earncial Service after any changes to this policy constitutes your acceptance of the updated policy. If you do not agree with any changes, you should stop using the Service and may request account deletion.

💡 We recommend reviewing this Privacy Policy periodically. You can always find the latest version at earncial.com/privacy.html.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Contact MethodDetails
📧 General Privacy Enquiries privacy@earncial.com
⚖️ GDPR Requests privacy@earncial.com — Subject: "GDPR Request"
🚨 Data Breach / Security privacy@earncial.com — Subject: "Security Concern"
🧒 Child Safety privacy@earncial.com — Subject: "Child Account"
🏢 Business / CAC Earncial Global · CAC RC No. 9374009

We aim to respond to all privacy-related enquiries within 5 business days, and to all formal data rights requests within 30 days as required by applicable law.

✅ You can also raise a concern or submit a request directly through our Support Center.