Privacy Policy

1. Who we are

BestSlr (“we”, “us”) runs the website and app at bestslr.netlify.app and is the data controller for the personal data described here. For any privacy question or request, email BestSlr <sponsor@westafricadreamin.com.

2. What we collect

Your account

• Your first and last name, email address, and whether you are a creator or brand.
• Creators also choose a username, which becomes their portfolio address.
• Your password, stored only as a one-way hash. We cannot see or recover your password.

Creator profile

• Profile and cover photos, bio, state and city, main niche and interests, and any keywords you choose for your portfolio.
• Your portfolio choices: posts you pin or hide, whether your portfolio is paused, and (Pro) whether it shows the BestSlr badge.
• Optionally, your gender and your birth year. We ask for the year only, not your full date of birth, and brands only ever see an age range.

Brand profile

• Company name, number of employees, and your role at the company.

Social accounts you connect

Only if you choose to connect Instagram, YouTube or TikTok, and only what you approve on that platform’s own permission screen:

• Your handle, display name, profile picture and account type.
• Follower or subscriber counts, and total likes, views or posts where available.
• Your recent posts or videos: link, thumbnail, caption, date, and their likes, comments, views and shares. We keep copies of a few thumbnails so your portfolio still shows them after the platform’s own image links expire.
• Audience breakdowns by age, gender, country and city, where the platform provides them. These are totals and percentages; we never receive who your followers are. TikTok does not provide audience data to us.
• Access keys (tokens) that let us refresh these stats. They are encrypted before we store them.

We only read data. We never post, comment, message or change anything on your social accounts.

Messages

• The messages you send and receive on BestSlr, who they are between, and when each conversation was last read. The BestSlr team can read a conversation only if someone in it reports it, and every such read is recorded.
• Reports you make (the reason and any details), people you block, and whether you want message emails.

Payments

• If you take a paid plan: the plan, its dates and status, the amount and date of each payment, and the customer and subscription references Paystack gives us. Your card details go to Paystack, never to us.

Technical data

• For each signed-in session: the IP address and browser type it was started from, so you and we can spot sign-ins that weren’t you.
• Short-lived counters of attempts per IP address or email, used to slow down password guessing and abuse.
• Portfolio activity: each visit to a portfolio is counted as the owner’s or a visitor’s, and each share by channel (link, WhatsApp, email, story image, PDF). We record the count, not who the visitor was.

3. How we use it, and our legal bases

• To provide BestSlr (performing our contract with you): run your account, build and show your portfolio, keep your stats up to date with a daily refresh, match creators with brand campaigns, and send emails you need, such as email verification, password resets and alerts when a connected account needs attention.
• With your consent: connecting social accounts, and the optional profile details (gender and birth year). You can withdraw consent at any time by disconnecting an account or clearing those fields. Doing so does not affect what we did before.
• For our legitimate interests: keeping accounts secure, preventing fraud and abuse, and understanding in aggregate how BestSlr is used (for example, which platforms creators connect most) so we can improve it.
• To meet legal obligations, such as responding to lawful requests from authorities.

We do not sell your personal data, and we do not use it for advertising.

How we use AI

We use AI services to help match creators with campaigns, in three ways. In each case our rules and our team make the decisions; AI only helps describe content.

• Understanding what creators post: about once a week, the captions of a connected creator’s recent posts are read to tag their topics, languages and any content brands may want to avoid (for example gambling or alcohol). We remove links, @mentions, email addresses and phone numbers first, and never send names, usernames or photos. Brand-safety tags are seen only by our review team.
• Explaining matches to brands: when we publish matches, a short explanation is written from the match facts (such as audience shares and niche), without the creator’s or brand’s name.
• Suggesting keywords, only when a creator presses “Suggest with AI”, from their niche, interests and recent captions.

We rely on our legitimate interest in matching creators and brands well, and on creators’ consent to connect their accounts. Our AI providers process this text on our instructions and, under their terms for paid business use, do not use it to train their models.

4. Who can see your information

• Everyone, on your portfolio (creators): your portfolio page is public so you can share it. It shows your name, username, photos, bio, location, niche, your connected handles and their stats. Links to it show a preview picture with your photo and follower counts, and the story image and PDF you create carry the same details.
• Brands on BestSlr can find creators and filter by niche, location, platform, follower range, age range and gender (if you gave it).
• People you message see your messages. Our team can read a conversation only if someone reports it, and every such access is logged.
• Our team reviews suggested matches before brands see them, and can view accounts to provide support and keep the service safe.

5. Service providers we use

We share personal data only with providers who run parts of BestSlr for us, under contracts that require them to protect it and use it only on our instructions:

• Neon: hosts our database (in the United States).
• Netlify: hosts the website and app.
• Cloudflare: stores uploaded photos and post thumbnails.
• Google: delivers our emails through Gmail.
• Mistral AI, Anthropic, Google and OpenAI: AI services that read caption text and match facts as described in “How we use AI” (Mistral AI in the European Union, the others in the United States). We use one at a time and switch to another if it’s unavailable.
• Paystack: processes payments for paid plans. It receives your email address and the payment details you enter on its checkout page.
• Inngest: schedules the daily stats refresh. It receives internal reference numbers only, not your profile or stats.
• Instagram (Meta), YouTube (Google) and TikTok: we request your data from them when you connect an account. Their own privacy policies apply to what you share with them.

We may also disclose data if the law requires it, to protect people’s safety, or as part of a merger or sale of BestSlr, in which case this policy would continue to apply.

6. Transfers outside Nigeria

Our providers store and process data outside Nigeria, mainly in the United States and the European Union. We rely on the safeguards the NDPA allows for such transfers, such as contractual commitments from each provider to protect personal data to an adequate standard.

7. How long we keep it

• Account and profile data: for as long as your account is open.
• Social stats: we save a snapshot each day so your portfolio can show trends. Post details (captions, links, thumbnails) are removed from snapshots after 30 days; the counts are kept.
• Disconnecting a social account immediately deletes its access keys, its whole stats history and its stored thumbnails.
• Pinned posts: a copy of the post’s details and thumbnail is kept until you unpin it or disconnect the account.
• Closing your account: we delete your data within 30 days of your request, except records we must keep by law (such as payment records). See Data deletion.
• Sign-in sessions expire after 7 days without use.

8. Your rights

Under the NDPA you can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is wrong (you can edit most of it yourself in Settings);
• delete your data, or restrict how we use it;
• send your data to you or another service in a machine-readable format;
• stop processing based on our legitimate interests, and withdraw consent.

Email BestSlr <sponsor@westafricadreamin.com from the address on your account. We may ask you to confirm it is you, and we will reply within 30 days. You can also complain to the Nigeria Data Protection Commission.

9. Google and YouTube data

If you connect YouTube, we use YouTube API Services. By connecting, you agree to the YouTube Terms of Service, and Google’s handling of your data is covered by the Google Privacy Policy. You can remove BestSlr’s access at any time from your Google account permissions page.

BestSlr’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

10. Security

We encrypt connections to BestSlr, hash passwords, encrypt social access keys, limit repeated sign-in attempts and restrict staff access to what their role needs. No system is perfectly secure, so if a breach puts your data at risk, we will tell the Nigeria Data Protection Commission and, where the risk to you is high, tell you directly.

11. Young people

You must be at least 13 to use BestSlr. If you are under 18, you need your parent or guardian’s permission to create an account and connect social accounts. If you believe a child has given us data without that permission, contact us and we will delete it.

12. Cookies

We only use cookies that BestSlr needs to work:

• Sign-in cookie: keeps you signed in. It lasts until you log out or up to 7 days without use.
• Connection cookie: set for 10 minutes while you connect a social account, to make sure the approval coming back from the platform is really yours.

We do not use advertising or cross-site tracking cookies. Portfolio visits are counted without cookies: your browser only remembers, until you close the tab, that it already counted a visit. If we ever add optional cookies, such as for analytics, we will ask you first.

13. Changes to this policy

We will update this page when how we handle data changes, and change the date at the top. If a change is significant, we will also tell you by email or in the app before it takes effect.

14. Contact

Questions or requests about your data: BestSlr <sponsor@westafricadreamin.com.