Privacy Policy

This policy explains what information Content Pays ("Content Pays", "we", "us") collects when you use the platform as a brand or creator, how we use and share it, how long we keep it, and the choices and rights you have.

Contentlayer Technologies Ltd (RC 9995447), a company registered in Nigeria and trading as Content Pays, is the data controller for this information under the Nigeria Data Protection Act 2023. You can reach us about anything in this policy at support@contentpays.live.

• Account and profile data: name, email, role, handle, profile image, phone number, date of birth, and the brand or creator details you provide, including brand team members you invite, plus a record of when you accepted our Terms and this policy.
• Campaign data: campaign briefs, budgets, participation, submitted clip links, review decisions, view counts, and performance metrics.
• Connected social accounts: platform IDs, handles, connection status, permissions, and authorization credentials such as access or refresh tokens, plus the information we retrieve with them, such as your posts, their view counts, thumbnails, and preview video links.
• Payments and payouts: wallet top-ups, campaign reserves, fees, earnings, and withdrawals, with their amounts, status, and payment-provider references. For payouts, we keep your bank, the account name, and your account number. Card details are entered on our payment provider's checkout and are not received or stored by Content Pays.
• Chat and messages: messages you send in community and campaign chats, direct and group messages, and support conversations, including replies, reactions, polls and votes, pinned messages, files you share in Support (images, PDFs, and videos), reports you make or receive, and moderation actions such as mutes and bans.
• Activity status: whether you are online, when you were last seen, when you are typing in a direct, group, or support conversation, and when you last read a conversation.
• Technical and communications data: sign-in and security events, device and browser information, notifications we send you, service logs, and support requests.

We use information to create and secure accounts, confirm you are old enough to use Content Pays, display profiles, run campaigns, review submissions, connect the social accounts you choose to link, verify eligible views, calculate earnings, process wallet top-ups and payouts, provide chat and support, send notifications, prevent fraud, and keep the platform working.

Notifications and emails. We notify you in the app about activity on your account. We also email you about your money (top-ups, withdrawals, and refunds), your account (such as a changed payout bank account or a suspension), and campaign review decisions; these service emails are always sent. Other emails (weekly clip summaries, campaign budget alerts, reminders about messages left unread for 7 days, and the review team's daily digest) can be turned off in your settings or with the unsubscribe link in each one. We don't send marketing emails unless you agree to them.

Automated checks. To keep deals on Content Pays and protect users from scams, messages and the text of PDFs you share are checked automatically before they are sent. Messages containing email addresses, phone numbers, links to sites other than Content Pays and supported social platforms, invitations to move to other apps, or words on our blocked list are not sent; you see the reason and can change the message. Changing your payout bank account pauses withdrawals for 48 hours as a security measure. If you think an automated check got something wrong, contact us.

We use your information only where the law allows it:

• To provide the service you signed up for (contract): your account and profile, campaigns and submissions, view verification, earnings, wallets, payouts, chat, and support.
• To meet legal obligations: keeping financial and tax records, and responding to lawful requests from authorities.
• Our legitimate interests: preventing fraud, fake engagement, and scams, the automated message checks, the bank-change hold, moderating chats, securing accounts, and improving Content Pays. We weigh these against your rights and don't use them where your interests should come first.
• Your consent: connecting social accounts, and showing others when you are active. You can withdraw consent at any time by disconnecting an account or turning off "Show when I'm active"; this doesn't affect what we did before.

• Brands see the profile details, submitted clips, and campaign performance needed to run and review campaigns you join.
• Chat members see what you post in a chat they belong to: community chat members (creators and the Content Pays team), campaign chat members (creators in that campaign, the brand's team, and the Content Pays team), and the members of a direct or group conversation. Your name, profile image, and role are shown with your messages.
• The Content Pays team reads support conversations, reviews reported messages (including from direct messages), and may remove messages or restrict members to enforce our Terms.
• People you message can see when you are online or were last seen, whether you have seen their latest message, and when you are typing. You can turn off "Show when I'm active" in Chat to hide your online status and last seen.

We share information with service providers that run parts of Content Pays for us: Google Cloud and Firebase (sign-in, hosting, databases, file storage, and live chat status), Flutterwave (card and bank payments, bank account verification, and bank transfers for payouts), and Resend (email). When you connect to or use a social platform through Content Pays, we exchange information with that platform, currently Google/YouTube, TikTok, Meta (Instagram and Facebook), and X. We do not sell personal information.

Connecting a social account is optional. We use a connection only for features you authorize: verifying that a submitted post is yours, checking that it meets campaign rules, reading its view counts, and showing its thumbnail and preview. You can disconnect an account in Content Pays, which deletes its credentials, or revoke access from the social platform, at any time; deleting your Content Pays account also removes your connected accounts and their credentials. While an account is disconnected we can't read the views of clips posted from it, so they stop earning until you connect it again; if it isn't connected again within 7 days, those clips are removed and their unreleased earnings are forfeited.

YouTube. If you connect a YouTube channel, Content Pays uses YouTube API Services to confirm the channel is yours, check that a Short you submit was uploaded to it and is public, recent, and vertical or square, and read its view count while the campaign runs. By connecting YouTube you agree to the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy. You can disconnect YouTube in Content Pays at any time, which deletes the credentials we store, and you can revoke Content Pays' access in your Google security settings. Content Pays' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

TikTok. If you connect TikTok, we read your basic profile (display name, username, profile photo and profile link) and your list of videos, so we can confirm that a video you submit is yours and read its view count. You can also remove Content Pays from the app permissions in your TikTok settings.

Instagram. If you connect an Instagram professional account, we read its username, name and profile photo and your list of posts, so we can confirm that a Reel you submit is yours, and its views and likes from Instagram insights. You can also remove Content Pays under apps and websites in your Instagram settings.

Facebook. If you connect a Facebook Page, we read the Page's name and ID, confirm that a video you submit was posted by that Page and is published, and read its view count. You can also remove Content Pays under business integrations in your Facebook settings.

X. If you connect X, we read your profile (name, username and profile photo) and the posts you submit, so we can confirm they are yours and read the video's view count. You can also remove Content Pays from the connected apps in your X settings.

We use information from these platforms only for the purposes above. We don't post on your behalf or read your private messages. Brands see the clips you submit to their campaigns, the handle they were posted from and their view counts. See Deleting your data to remove what we hold.

Where it is stored. Information is stored using Google Cloud services in the United States, and some social platforms and service providers, including Flutterwave, may process it in other countries. When information leaves Nigeria, we rely on the data-protection terms and contractual safeguards our providers commit to, or on the transfer being necessary to provide the service you asked for, as the Nigeria Data Protection Act allows.

Security. Firebase Authentication handles passwords; Content Pays does not store raw passwords. Bank account numbers are encrypted, and only the bank, account name, and last four digits are shown in the app. We use access controls and the security protections of our infrastructure providers. If a breach puts your rights at risk, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it and tell you without undue delay where the risk to you is high.

How long we keep it.

• Account and profile data: while your account exists. It is removed when you delete your account, except as described below.
• Financial records (every top-up, campaign reserve, fee, earning, and payout) and the restricted identity record that shows who made them: 7 years after the transaction, including after an account is deleted.
• Messages: until they are deleted by the sender or removed by moderators. Deleting a message removes its text and files. Files that were uploaded but never sent are removed within about a day.
• Support conversations of a deleted account: 12 months after the account is deleted, in case of disputes, then deleted with their files.
• Connected social accounts: until you disconnect them or delete your account, when their credentials are removed.
• Service and security logs: for a limited period, no longer than 12 months, unless needed to investigate a security incident or fraud.

Under the Nigeria Data Protection Act 2023 and other applicable law, you have the right to:

• access your information and receive a copy in a common electronic format;
• correct information that is wrong or incomplete;
• have your information deleted;
• restrict how we use it, or object to uses based on our legitimate interests;
• withdraw consent you have given, at any time;
• ask for a person to review a decision made only by automated means that significantly affects you, such as views being disqualified or a payout being held, and to give your side; and
• complain to the Nigeria Data Protection Commission.

We may need to confirm your identity before acting on a request, and we aim to respond within 30 days.

You can delete your creator or brand account yourself from your profile. Deletion removes that profile and your connected social accounts and their credentials, and removes your sign-in unless you keep another role or are on the Content Pays team. Deletion is not available while money or work is still in progress: a creator must first withdraw available earnings and wait for held earnings, pending withdrawals, clips awaiting review, and running campaigns to finish; a brand must close its campaigns, remove team members, and refund any wallet balance to its bank.

After deletion we keep financial records and a restricted record of your identity so we can show who made each transaction and prevent fraud. Your notifications, email settings, online status and contacts are deleted, and you leave group and campaign chats. Messages you posted stay in the conversations they were part of, so other people's chats and replies still make sense, but your photo is removed and your name is marked "(deleted account)". Nobody can send you new direct messages. Contact us if you want the text of your messages removed too.

To make a request, email support@contentpays.live.

You can remove your information from Content Pays in three ways.

• Disconnect one social account. Sign in, go to Social Media Accounts, and choose Disconnect on the account. This deletes the account's connection record and the access credentials we store for it right away. For YouTube, we also revoke Content Pays' access with Google. Clips posted from that account stop earning, and are removed if the account isn't connected again within 7 days.
• Delete your whole account. Go to Profile and choose Delete account (creators) or Delete brand account (brands). This deletes your profile, your connected social accounts and their credentials, and your sign-in, as described in Your rights & account deletion, including what we must keep, such as financial records.
• Ask us. If you can't sign in, or you removed Content Pays from Instagram, Facebook, TikTok, X or Google and want the information we received from that platform deleted, email support@contentpays.live from your account's email address. We confirm it's you, delete the data, and reply within 30 days.

We use browser storage to keep you signed in and to remember interface preferences such as your theme, whether the menu is collapsed, and the width of the chat list. While you use the app, it keeps a live connection to our database to deliver messages and activity status. The current app does not use analytics or advertising cookies. Social platform players and previews may send information to their provider when they load or play; that provider's privacy policy applies to its service. We will update this section if we add analytics or other non-essential tracking.

Content Pays is only for people aged 18 and over, and you confirm your age when you create an account. We don't knowingly collect information about anyone under 18. If we learn that an account belongs to someone under 18, we will close it and delete their information, except records the law requires us to keep. If you think a child is using Content Pays, contact us.

We will post material updates here, update the date above, and provide notice when appropriate.

Privacy and data-protection questions: support@contentpays.live.