Privacy

This explains what we collect, why we collect it, and what we do not do with it. It is short because we do not collect much.

What we collect

• Your email address, and your name if you give us one. We need the email to send your sign-up code and to reset your password. Nothing else is emailed to you.
• Your orders — the service, the link you gave us, the quantity, and what you were charged.
• Payments — the amount, the reference and whether it worked. Our payment provider handles your card details; we never see or store them.
• Sign-in information — the IP address and browser of each session, so you can see your own devices and sign out the ones you do not recognise.

What we never collect

Your social media passwords. We never ask for them and you should never give them to anyone selling growth services. We only need a public link.

How we keep it safe

• Passwords are hashed with argon2id. Nobody here can read yours, including us.
• Two-factor secrets and recovery codes are encrypted or hashed. A copy of our database would not let anyone sign in as you.
• The whole site runs over HTTPS.

Who we share it with

We share the minimum needed to actually deliver what you bought:

• Our supplier gets the service and the link for your order. Not your name, not your email.
• Our payment provider gets what it needs to take the payment.
• Our email provider gets your address so the email can arrive.

And two more: TikTok and Meta, the company behind Facebook and Instagram, where we advertise. The next section says exactly what they get, and how to turn them off.

We do not sell your data.

Cookies

Two cookies are always on, because the site needs them: one keeps you signed in, and one remembers whether you chose the light or dark theme. If you turn ad tracking off below, one more remembers that, so our server respects it too. It lasts a year.

Which advert you came from

If you arrive by clicking one of our adverts, the link carries the names of the campaign, the ad set and the ad, and Facebook adds its own click code. We keep those for 90 days in a cookie, with a copy in your browser’s storage. If you sign up, we save them with your account, and with each top-up and order you make, so we can see which adverts bring customers and which do not. They stay with us: we do not send them to TikTok, Meta or anyone else, and we keep them whether ad tracking is on or off.

TikTok’s and Meta’s pixels

We use TikTok’s pixel and Meta’s pixel on this site. They are small pieces of code from TikTok and from Meta that show us which of our adverts on each bring people here. They run when you visit, unless you have turned ad tracking off on the device you are using.

While they are on:

• Each sets its own cookies on this site so it can recognise your browser when you come back: TikTok’s, such as _ttp, last up to 13 months; Meta’s, _fbp, and _fbc if you came from one of its adverts, last about three months.
• They tell TikTok and Meta which pages you open, how long you stay, and which links and buttons you press, including the words on them.
• We tell both when you sign up, when you start adding money, when the money arrives and when you place an order, with the amount in naira.
• We send those four to both from your browser and from our own server, so they still arrive if your browser blocks their code, or you close the page before your money lands. Each company counts every event once. From our server they also carry your IP address, the name of your browser, and each company’s own cookies and ad click code if you have them.
• So that our server can tell them when your money arrives, it keeps those details with your top-up until then. They are deleted as soon as each has been told, if the top-up does not go through, or after seven days, whichever comes first.
• When you are signed in, we also send both a scrambled code made from your email address, and another made from your account number. The scrambling is called a SHA-256 hash. TikTok and Meta each make the same kind of code from their own users’ email addresses and compare them, to link a visit to an account on their platform. Your email address itself is not sent.

We never send either your password, and your card details are never on our site at all. What they do with this is up to their own privacy policies: TikTok’s and Meta’s.

You can turn ad tracking off whenever you like, with the switch below. That stops both pixels, deletes their cookies from this site on the device you are using, and our server stops reporting what you do on it. Only a top-up you started before turning it off is still reported to TikTok and Meta, when its money arrives. If you pressed Decline when we used to ask, it is already off for you.

How long we keep it

Orders and payment records are kept for seven years, because tax law requires it. Sign-in records are cleared thirty days after a session ends. If you ask us to delete your account we remove everything else.

Your choices

• You can see and change your details in your settings at any time.
• You can turn ad tracking — TikTok’s and Meta’s pixels — off on your device, and back on. See Cookies, above.
• You can ask us to delete your account. Email info@9jaboost.com from the address on the account.

Questions

Email info@9jaboost.com. A person will answer.