Privacy policy

This policy explains what personal data OBUSKKO DIGITAL ECOSYSTEM ("OBUSKKO", "we") collects, why, who we share it with and your rights. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and, where they apply, other data-protection laws.

Who we are

OBUSKKO is the data controller for the personal data described here. Contact us through the support page or at support@planktonbsc.org.

What we collect

• Account details: your name, email address and password (stored only as a secure hash), and settings such as two-factor authentication.
• What you create: briefs, answers, manuscripts, course materials, designs, uploaded photos, documents and recordings, and the files we generate for you.
• Orders and payments: order references, amounts, payment status and refunds. Card details are entered on Paystack's checkout and are never stored by us.
• Selling and affiliate details: your display name, payout bank account details (used only for payouts), promotional channels, commissions and payouts.
• Security and usage records: sign-in events, IP addresses, browser type, page views of products (stored as an anonymous hash, not your IP), and records of AI usage and costs.
• Messages: support requests and emails we send you.

Why we use it (and our legal basis)

• To provide the services you ask for, including creating, delivering and selling products (performance of a contract).
• To take payments, prevent fraud and keep accounts secure (contract, legal obligation and legitimate interests).
• To send transactional emails about your account, orders and products (contract). Creator update emails are sent only if you opt in, and you can unsubscribe at any time (consent).
• To keep financial records as required by law (legal obligation).

We do not sell your personal data.

Who we share it with

We use trusted service providers, only for the purposes above:

• Paystack – payment processing.
• AI providers – when you use AI features, your brief and content are sent to the AI service the platform uses, such as Anthropic, OpenAI or Google, to generate text, images or transcripts, and HeyGen for presenter videos. They process it to provide the service; we use settings that limit retention where available.
• Email delivery provider – to send emails.
• Hosting provider – to run the website and store files.

When you buy a creator's product, the creator sees your first name and last initial, but never your email address or other contact details.

Some providers may process data outside Nigeria. Where they do, we rely on the safeguards permitted by the NDPA.

How long we keep it

• Account data: while your account is open, and for a reasonable period afterwards to deal with any questions.
• Security and audit records: about 365 days.
• Referral click records: about 180 days.
• Email delivery logs: about 180 days.
• Orders, payments, refunds, payouts and commissions: kept for as long as financial and tax laws require.

Your rights

You can ask to access, correct or delete your personal data, to object to or restrict its use, to withdraw consent, and to receive a copy of your data. You can also complain to the Nigeria Data Protection Commission. To make a request, contact us through the support page.

Cookies

We use essential cookies to keep you signed in and secure, and a referral cookie to credit affiliates for sales they refer. We do not use advertising cookies.

Security

We protect data with encryption in transit, hashed passwords, access controls, audit logs and monitoring. No system is perfectly secure; if a breach affects you, we will tell you and the regulator as the law requires.

Changes

We will post any changes on this page and, if they are significant, tell you by email.