Privacy Policy

1. Who We Are

Grindpoint is operated by Grindpoint Nigeria Limited, a company registered in the Federal Republic of Nigeria. Our platform allows registered users to complete micro-tasks and earn Nigerian Naira, paid out to their bank accounts or mobile wallets.

When this policy refers to "Grindpoint," "we," "us," or "our," it means Grindpoint Nigeria Limited. When it refers to "you" or "user," it means any person who accesses or uses our platform.

2. Data We Collect

2.1 Information You Provide Directly

• Account registration: Full name, email address, phone number, state of residence, and password (stored securely via Supabase Auth — never in plain text).
• Withdrawal requests: Bank name, account number, account holder name, or mobile wallet details.
• Profile updates: Any changes you make to your profile information.
• Communications: Messages you send to our support team.

2.2 Information Collected Automatically

• Activity data: Tasks completed, timestamps, rewards earned, referrals made.
• Device data: Browser type, operating system, and general device information.
• Usage data: Pages visited, features used, session duration.
• IP address: Used for fraud prevention and security purposes.

2.3 Information From Third Parties

• Referral data: If you were referred by another user, we receive their user ID to credit their referral bonus.

3. How We Use Your Data

We use the data we collect for the following purposes:

• Account management: To create, maintain, and secure your Grindpoint account.
• Payment processing: To process your withdrawal requests and verify your bank or wallet details.
• Platform operation: To credit task rewards, track referral bonuses, and update your wallet balance.
• Security & fraud prevention: To detect unusual activity, prevent abuse, and protect the platform.
• Customer support: To respond to your inquiries and resolve disputes.
• Compliance: To meet our obligations under Nigerian law, including the Nigeria Data Protection Regulation (NDPR).
• Improvement: To understand how users interact with the platform and improve the experience.

4. Data Sharing

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your information only in the following limited circumstances:

• Payment partners: Your bank account or wallet details are shared only with the Nigerian financial institution processing your withdrawal.
• Infrastructure providers: We use Supabase (a US-based cloud database provider) to store data securely. Supabase complies with industry-standard security practices.
• Legal requirements: We may disclose your information if required by Nigerian law, court order, or legitimate government authority.
• Business transfers: In the event of a merger, acquisition, or sale, user data may be transferred to the new entity, subject to the same privacy protections.

5. Data Storage & Security

Your data is stored on Supabase infrastructure, protected by industry-standard encryption at rest and in transit (TLS/SSL). We implement Row Level Security (RLS) policies ensuring users can only access their own data.

Despite our efforts, no method of internet transmission or electronic storage is 100% secure. We encourage you to use a strong, unique password and never share your login credentials.

We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

6. Cookies

Grindpoint uses minimal cookies and browser local storage strictly for session management (keeping you logged in) and platform functionality. We do not use tracking cookies or third-party advertising cookies.

You may disable cookies in your browser settings, but this will prevent you from staying logged in to your account.

7. Your Rights

Under the Nigeria Data Protection Regulation (NDPR) and as a matter of our policy, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information in your profile settings.
• Deletion: Request deletion of your account and associated data via your Profile page or by emailing us.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain uses of your data where we rely on legitimate interests.

To exercise any of these rights, contact us at privacy@grindpoint.ng. We will respond within 30 days.

8. Children's Privacy

Grindpoint is intended for users aged 18 years and older. We do not knowingly collect personal information from individuals under 18. If we discover that a user is under 18, we will immediately suspend their account and delete their data. If you believe a minor has registered on our platform, please contact us at privacy@grindpoint.ng.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify you via an in-platform announcement or email. Your continued use of Grindpoint after any changes constitutes your acceptance of the updated policy.

10. Contact Us

For privacy-related inquiries, data requests, or complaints:

• Email: privacy@grindpoint.ng
• Support: support@grindpoint.ng
• Address: Grindpoint Nigeria Limited, Lagos, Nigeria.