Privacy Policy

1. Introduction

At SellPass, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

This policy applies to all users of SellPass, including creators, customers, and visitors to our website. By using our services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you provide directly to us when you:

• Create an Account: Name, email address, phone number, password, and profile information
• Make Purchases: Billing address, payment information, transaction history, and purchase preferences
• Upload Content: Digital products, course materials, images, videos, and other content you create
• Communicate with Us: Support tickets, feedback, surveys, and correspondence
• Participate in Communities: Comments, reviews, forum posts, and social interactions
• Complete Forms: Registration forms, contact forms, and survey responses

2.2 Information We Collect Automatically

When you use our services, we automatically collect certain information, including:

• Device Information: IP address, browser type and version, operating system, device identifiers, and mobile network information
• Usage Data: Pages visited, features used, time spent on pages, click patterns, and navigation paths
• Log Data: Access times, pages viewed, error logs, and performance metrics
• Location Data: General geographic location based on IP address (with your consent for precise location)
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar tracking technologies

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Social media platforms when you connect your accounts
• Payment processors for transaction verification
• Analytics providers for usage insights
• Marketing partners for campaign effectiveness
• Public databases and business directories

3. How We Use Your Information

3.1 Service Provision

We use your information to:

• Provide, maintain, and improve our platform and services
• Process transactions and manage your account
• Deliver digital products and course content
• Provide customer support and technical assistance
• Send service-related communications and updates

3.2 Personalization and Experience

We use your information to:

• Personalize your experience and content recommendations
• Customize our platform based on your preferences
• Provide relevant product suggestions and offers
• Improve our user interface and functionality

3.3 Communication and Marketing

We use your information to:

• Send newsletters, promotional materials, and marketing communications
• Notify you about new features, products, and services
• Conduct surveys and gather feedback
• Send important account and security notifications

3.4 Analytics and Improvement

We use your information to:

• Analyze usage patterns and platform performance
• Conduct research and development
• Monitor and prevent fraud and security threats
• Generate insights for business intelligence

3.5 Legal and Compliance

We use your information to:

• Comply with legal obligations and regulatory requirements
• Respond to legal requests and court orders
• Protect our rights and prevent illegal activities
• Enforce our terms of service and policies

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Information

We do not sell, rent, or trade your personal information to third parties for monetary consideration.

4.2 Sharing with Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

4.3 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our platform, including:

• Payment processors for transaction processing
• Cloud hosting providers for data storage and processing
• Email service providers for communications
• Analytics providers for usage insights
• Customer support tools and platforms
• Marketing and advertising partners

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, including:

• Court orders and subpoenas
• Government investigations
• Regulatory compliance requirements
• Protection of rights and safety

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to the same privacy protections.

4.6 Public Information

Information you choose to make public (such as public profile information or public posts) may be visible to other users and the general public.

5. Data Security

5.1 Security Measures

We implement comprehensive security measures to protect your personal information, including:

• Encryption: Data is encrypted in transit using SSL/TLS and at rest using AES-256 encryption
• Access Controls: Strict access controls and authentication mechanisms
• Regular Audits: Regular security assessments and penetration testing
• Employee Training: Comprehensive data protection training for all employees
• Infrastructure Security: Secure data centers with physical and logical security controls
• Monitoring: Continuous monitoring for security threats and anomalies

5.2 Data Breach Response

In the event of a data breach, we will:

• Immediately investigate and contain the breach
• Notify affected users within 72 hours when required by law
• Report to relevant authorities as required
• Take steps to prevent similar incidents

6. Data Retention

6.1 Retention Periods

We retain your personal information for different periods depending on the type of information and purpose:

• Account Information: Retained while your account is active and for 3 years after closure
• Transaction Data: Retained for 7 years for tax and legal compliance
• Usage Data: Retained for 2 years for analytics and improvement
• Marketing Data: Retained until you opt out or for 3 years of inactivity
• Support Communications: Retained for 3 years for quality assurance

6.2 Deletion

When retention periods expire, we securely delete or anonymize your personal information, except when:

• Required by law to retain the information
• Necessary for legitimate business purposes
• Information has been anonymized and cannot be linked to you

7. Your Rights and Choices

7.1 Access and Portability

You have the right to:

• Access your personal information and receive a copy
• Request data portability in a structured, machine-readable format
• View your account information and transaction history

7.2 Correction and Updates

You can:

• Update your account information at any time
• Correct inaccurate or incomplete information
• Request correction of information we hold about you

7.3 Deletion and Right to be Forgotten

You have the right to:

• Request deletion of your personal information
• Close your account and have associated data deleted
• Request removal from marketing communications

7.4 Restriction and Objection

You can:

• Restrict processing of your personal information
• Object to certain uses of your information
• Opt out of marketing communications

7.5 Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days and may require identity verification.

8. Cookies and Tracking Technologies

8.1 Types of Cookies

We use various types of cookies and tracking technologies:

• Essential Cookies: Necessary for platform functionality and security
• Performance Cookies: Help us understand how visitors use our platform
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used for targeted advertising and marketing

8.2 Cookie Management

You can control cookies through:

• Your browser settings to block or delete cookies
• Our cookie preference center (when available)
• Opt-out mechanisms for specific tracking technologies

8.3 Third-Party Tracking

We may use third-party analytics and advertising services that place their own cookies and tracking technologies on our platform.

9. International Data Transfers

9.1 Cross-Border Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions by data protection authorities
• Certification schemes and codes of conduct
• Binding corporate rules and other appropriate safeguards

9.2 Data Processing Locations

We primarily process data in Nigeria and may use cloud services with servers in various countries. We ensure all transfers comply with applicable data protection laws.

10. Children's Privacy

10.1 Age Restrictions

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

10.2 Parental Consent

If you are between 13-17 years old, you must have parental consent to use our services. Parents can contact us to review, modify, or delete their child's information.

10.3 Reporting

If you believe we have collected information from a child under 13, please contact us immediately at [email protected].

11. Third-Party Services and Integrations

11.1 Third-Party Services

Our platform may integrate with third-party services, including:

• Payment processors (Stripe, PayPal, etc.)
• Email marketing services (Mailchimp, ConvertKit, etc.)
• Analytics providers (Google Analytics, etc.)
• Social media platforms
• Cloud storage services

11.2 Third-Party Privacy Policies

These third-party services have their own privacy policies. We encourage you to review their policies to understand how they handle your information.

12. Marketing and Communications

12.1 Marketing Communications

We may send you marketing communications about our products and services. You can opt out at any time by:

• Clicking the unsubscribe link in our emails
• Updating your communication preferences in your account
• Contacting us directly

12.2 Service Communications

We will continue to send important service-related communications even if you opt out of marketing communications.

13. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our data protection practices. You can contact our DPO at:

Data Protection Officer:
Email: [email protected]

14. Changes to This Privacy Policy

14.1 Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying prominent notices on our platform

14.2 Effective Date

The "Last updated" date at the top of this policy indicates when it was last revised. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy Team:
Support: [email protected]

16. Compliance and Regulatory Information

16.1 Applicable Laws

This Privacy Policy is designed to comply with applicable data protection laws, including:

• Nigeria Data Protection Regulation (NDPR)
• General Data Protection Regulation (GDPR) for EU users
• California Consumer Privacy Act (CCPA) for California residents
• Other applicable local and international privacy laws

16.2 Regulatory Authority

You have the right to lodge a complaint with the relevant data protection authority if you believe we have not handled your personal information in accordance with applicable laws.

17. Effective Date

This Privacy Policy is effective as of September 14, 2025, and will remain in effect until modified or replaced.