Privacy Policy

Information we handle

Account information includes your email address, chosen username, profile details and authentication session information. We use it to provide sign-in and account features. Your email is not displayed alongside your contributions.

Contributions include reviews, comments, business replies and evidence files. These are public when published. Business information includes listing details, public contact details and Instagram identity. Ownership claims include your connection note and claim history. Claims and administrative records are not displayed as public reviews.

We also process email preferences, delivery information, reports and administrative audit records to support notifications, moderation and service accountability. Hosting, authentication and analytics providers may process technical information about website use.

Public evidence and withdrawal

Evidence is stored using public file links. Remove personal information before uploading. Withdrawing or moderating a review hides it from normal public display but does not currently delete its evidence files. A person who already has a file link may still be able to access it.

For concerns about a public evidence file, contact the team with the relevant link and explain what needs to be assessed. Do not send passwords or repost exposed personal information. File removal or redaction requires a separate assessment from hiding the review.

Why we use information

We use information to provide requested account and review features, assess ownership claims, prevent abuse, handle reports and legal requests, and send the messages described below. We use website measurement to understand how the service is used. Signing in is not consent to optional marketing, and simply visiting the site should not be treated as consent to every type of processing.

Emails and preferences

Sign-in and necessary security messages support account access. Activity messages cover reviews, business replies, badges, claims and moderation. You can manage activity messages in your account email preferences.

Newsletter sending is not currently automated. Newsletters require a separate subscription and an unsubscribe route. Signing in does not subscribe you, and a previous launch-waitlist subscription is not treated as newsletter consent. Existing launch subscriptions are held separately for the launch announcement.

Service providers

We use Vercel for hosting; Supabase for authentication, database and storage; Resend for sign-in and activity emails; Loops for the launch audience; and Google Analytics for website measurement. Relevant information is processed by these providers to deliver their services. We do not sell your personal data.

Provider processing may take place outside Nigeria. This notice does not claim that specific project regions or international transfer safeguards have been independently verified. We may disclose information where required by law or necessary to address a lawful complaint, subject to applicable protections.

Cookies and website analytics

Essential session technology supports sign-in. Google Analytics currently loads when you visit and does not wait for an in-site consent selection. It collects information such as pages viewed, device and approximate location information, referral source and website interactions. We do not send your sign-in email address to Google Analytics.

Our private admin reporting also records visible business-page visits and searches or category-filter use. A first-party browser identifier cookie lasts 30 days. If you are signed in, activity may be linked to your account to measure active users. These reporting records do not include your email, IP address, full visited URL or search text. We retain limited reporting history of account, listing, review, claim and moderation states to compare periods.

During first-time username setup, you may optionally tell us how you heard about Checkamfirst. The answer is private to the team and used for acquisition reporting, not displayed with your profile or reviews. You can skip it. Do not include personal information in an Other answer.

Browser settings and blockers can limit collection. They do not replace privacy choices required by applicable law. Our analytics lawful-basis assessment and any additional controls remain subject to legal review; this notice is not a claim that disclosure alone makes every use lawful.

Retention

We keep information for service operation, accountability and the handling of relevant disputes or legal obligations. We have not implemented a fixed 12-month deletion schedule. Withdrawing a review is not the same as erasing its record, public evidence, provider copies or backups. Retention and erasure requests require an assessment of the information and applicable obligations.

Your rights and requests

Subject to applicable law, you may request access, correction, erasure, portability or restriction of your personal data, object to relevant processing, and withdraw consent where processing relies on it. We may verify your identity and assess lawful retention exceptions. These rights do not depend on a self-service deletion button being available.

Contact the team with your account email, the relevant page or file link and the action you are requesting. Include only information needed to identify and assess the issue. You can also raise a concern with the Nigeria Data Protection Commission.

Security and changes

We use access controls and protected connections, but no system is risk-free. Keep your sign-in links private and avoid uploading unnecessary sensitive information. We will update this notice when our handling of information changes.

Contact

Contact the Checkamfirst team at hello@checkamfirst.com. Include the relevant page or file link and explain your request. Do not send passwords or unnecessary sensitive information.

Learn more about your rights and raising concerns with the Nigeria Data Protection Commission.