1. Information We Collect

We collect the following categories of information:

a) Information You Provide

• Personal details: name, email, phone number, business details (if applicable)
• Payment details: handled securely by third-party providers (Paystack, Flutterwave). We do not store full card or banking information
• Submissions: contacts you provide when joining pools

b) Automatically Collected Data

• IP address, device information, browser type, operating system
• Activity logs (pages visited, campaigns joined, referrals used)
• Cookies and tracking data for authentication, fraud prevention, and analytics

c) Third-Party Data

• OTP verification services (SendChamp or equivalent)
• Payment confirmations from payment processors

2. How We Use Your Information

We use your information for the following purposes:

• To operate and maintain the Service
• To verify your identity (via email/phone OTP)
• To process payments and subscriptions
• To compile and share campaign contact pools with other participants
• To send transactional emails (payment confirmations, pool results, reminders)
• To detect, prevent, and investigate fraud, abuse, or illegal activity
• To improve our platform through analytics and feedback
• To comply with legal obligations

3. Data Sharing

We may share your information as follows:

• With other pool participants: your name, email, and phone number are shared with others in the same campaign pool
• With service providers: for payment processing, OTP verification, email delivery, analytics, or hosting
• With authorities: if required by law, regulation, or to protect our rights

We do not sell personal data to third parties.

4. Legal Basis for Processing (GDPR/UK GDPR)

For users in the EU/UK, we process your data based on:

• Consent (when you provide contacts for a pool)
• Contract (to deliver services you pay for)
• Legitimate interests (fraud prevention, service improvement)
• Legal obligations (tax, compliance)

5. Data Retention

• Contact data: kept until the campaign concludes and results are delivered
• Account data: retained while your account is active
• Payment records: retained as required by financial regulations
• We may anonymize and retain aggregated data for analytics

6. Data Security

We implement industry-standard measures to protect your data, including encryption, HTTPS, access controls, and secure hosting (e.g., Neon Tech PostgreSQL, Vercel).

However, no system is 100% secure. You use the Service at your own risk.

7. International Data Transfers

Your data may be stored and processed outside your country of residence, including in the United States, European Union, and Africa. By using the Service, you consent to such transfers.

We ensure that international transfers comply with GDPR/CCPA requirements.

8. Your Rights

Depending on your location, you may have rights including:

• Access: request a copy of your personal data
• Correction: request updates to incorrect information
• Deletion: request deletion of your account/data (except where legally required)
• Objection/Restriction: object to certain processing
• Data Portability: request a portable copy of your data
• Opt-out: opt out of marketing emails

To exercise these rights, contact us at support@listgrow.app.

9. Children's Privacy

ListGrow is not intended for use by individuals under 18. We do not knowingly collect data from children. If you believe a minor has provided data, contact us and we will delete it.

10. No Refund Policy & Data

As stated in our Terms:

• Payments are non-refundable
• If you request account deletion after joining a campaign, we cannot retract data already distributed in pool exports

11. Changes to Privacy Policy

We may update this Privacy Policy at any time. Updates will be posted on this page with the "Last Updated" date. Continued use of the Service constitutes acceptance.

12. Contact Us

If you have questions or requests regarding this Privacy Policy, please contact us: