Privacy Policy

Last updated: 27 October 2026

This Privacy Policy explains how DataRocket ("DataRocket", "we", "us", or "our") handles personal information when you visit our website, use our customer web app or installed app, or interact with our Telegram bot and related services (together, the "Services").

We use information to provide and secure your account, process wallet funding and purchases, communicate with you, and improve the Services. We do not sell your personal information.

1. Information we collect

• Account information: your name, phone number, email address, account identifiers, and information you add to your profile. If you choose Google sign-in, Google provides a verified email address, name, and a Google account identifier used to link future sign-ins. We do not access your Gmail inbox or messages.
• Sign-in and security information: password and transaction PIN credentials in protected, hashed form; session and refresh-cookie information; and, when you sign in, technical details such as IP address and browser or device user-agent.
• Telegram information: Telegram account identifiers and the name or information made available when you interact with our bot or link Telegram to your DataRocket account.
• Wallet and transaction information: wallet balances, transaction amounts, references, status and descriptions, funding records, and details needed to arrange airtime, data, or other purchases, such as a recipient phone number, network, and selected plan.
• Payment information: payment-provider references and account details needed to support wallet funding, such as a virtual-account number and bank name. Payments are handled by third-party providers. We do not ask for or store your full payment card number or card security code through the Services.
• Referral and campaign information: referral codes, referral relationships, and campaign parameters such as source, medium, campaign, and content. Campaign information may be saved in your browser for up to 30 days and may be associated with an account when you register.
• Communications and preferences: messages you send us, support requests, delivery records for account messages, and whether you opted in to optional marketing email.
• Device and usage information: browser and device information, basic service logs, pages or features used, and interactions with public-site links. Our website also uses Meta Pixel, which may collect browser, device, and interaction data to measure page visits and selected actions such as lead clicks.

2. How we use information

• Create and manage accounts, authenticate sign-ins, and link web and Telegram access.
• Provide wallet funding, purchase, referral, gift, and support features.
• Process and reconcile transactions, prevent fraud or abuse, and maintain service security.
• Send essential service messages, such as account, wallet, security, and transaction updates.
• Send optional product updates or re-engagement emails only where you have opted in; you can unsubscribe from marketing messages.
• Understand campaign performance and improve the reliability and usability of the Services.
• Meet legal obligations, resolve disputes, and enforce our terms and policies.

3. Legal grounds for processing

Where applicable under the Nigeria Data Protection Act and other relevant law, we process information when it is needed to provide a service you request or perform our agreement with you, to meet a legal obligation, with your consent, or for legitimate interests such as securing and improving the Services, preventing fraud, and handling support requests. Where we rely on consent, you may withdraw it; this does not affect processing that took place before withdrawal.

4. How we share information

We share only information reasonably needed for the purposes described in this Policy, with:

• Google when you choose Google sign-in. Google authenticates you and shares the identity information described above; we send the resulting sign-in credential to our backend for verification.
• Payment providers, including Paystack, to process or reconcile wallet funding and payment-related requests.
• Telegram when you use the Telegram bot or link your account, so the bot can respond and deliver requested service messages.
• Telecommunications and service-delivery providers to fulfil airtime, data, and related purchases.
• Technology and communications providers that host or operate parts of the Services, store data, deliver email, or help us measure public-site activity, including our hosting, database, email-delivery, and Meta Pixel providers.
• Authorities or other parties when required by law, to protect users or the Services, or to establish, exercise, or defend legal claims.

These providers process information under their own privacy notices and, where applicable, our instructions or service arrangements. We do not sell personal information. We do not share information with third parties for their own direct-marketing purposes.

5. International processing

Some providers may process or store information in countries outside Nigeria. Where this occurs, we take steps required by applicable data protection law to protect information transferred internationally. Providers' own services may also be subject to the laws of the countries where they operate.

6. Cookies, local storage, and the installed app

We use an HTTP-only cookie to maintain secure web sessions. We also use browser local storage for preferences such as theme and for campaign or referral attribution, which expires after up to 30 days. Our installed web app may cache application files needed to load the interface. Meta Pixel may use cookies or similar technologies for measurement. You can manage cookies and local storage through your browser settings; disabling them may affect sign-in or some features.

7. How long we keep information

We keep information for as long as needed to provide the Services, maintain account and transaction records, meet legal and accounting obligations, resolve disputes, and protect the Services. Retention periods vary by data type and purpose. When information is no longer needed, we will take reasonable steps to delete it or remove identifying details, subject to legal and operational requirements.

8. How we protect information

We use reasonable technical and organisational safeguards, including access controls and protected credential storage. No website, transmission, or storage system can be guaranteed completely secure. Please use a unique password, keep your transaction PIN private, and contact us promptly if you suspect unauthorised access to your account.

9. Your choices and data protection rights

Subject to applicable law, you may ask us to confirm whether we process your personal information, access or correct it, request deletion or restriction, object to certain processing, or request a portable copy where applicable. You may withdraw consent for optional marketing email at any time using its unsubscribe link. Withdrawing consent does not affect service or transaction messages we need to send.

To exercise a right or raise a privacy concern, email datarocketng@gmail.com. We may need to verify your identity before acting on a request. You may also have the right to complain to the Nigeria Data Protection Commission or another competent authority.

10. Children

The Services are not designed for children under 18, and we do not knowingly seek to collect their personal information. If you believe a child has provided us with personal information, contact us so we can review the request and take appropriate action.

11. Third-party services and links

The Services may link to or rely on third-party websites and services. Their privacy practices are governed by their own notices, not this Policy. Please review those notices before providing information to them.

12. Changes to this Policy

We may update this Policy when our Services or legal requirements change. We will publish the updated version on this page and revise the date above. If a change materially affects how we use information, we will take any additional notice or consent steps required by law.

13. Contact

For privacy questions or requests, contact DataRocket at datarocketng@gmail.com.