ARCHERSBOARD · LEGAL

Privacy Policy

Last updated: 2 October 2026

How Archersboard collects, uses and shares information when you browse offers, create an account or advertise.

Standard policy draft — not legal advice. This notice should be reviewed by a qualified privacy or legal practitioner, including confirmation of the operating entity, legal bases and international-transfer arrangements, before commercial reliance.

1. Who is responsible for your information

Archersboard (“we”, “us”, “our”) is responsible for personal information processed to operate this marketplace. We operate from Nigeria and serve viewers and businesses in different countries. Applicable privacy requirements may include the Nigeria Data Protection Act 2023 and laws in other regions where they apply.

A business you contact through an advertisement may separately handle information you give it, for example when purchasing, applying for a job or redeeming a coupon. That business’s privacy practices apply to its own processing.

2. Information we collect

Category	What it includes	How we receive it
Account details	Name, email, account ID, account type, verification status and a profile photo where available.	You provide these at signup; Google supplies permitted profile details if you use Google sign-in.
Authentication data	Hashed passwords for email/password accounts, verification and reset-token digests, expiry information and session records. We do not store your password in readable form.	Generated when you register, sign in, verify your email or reset your password.
Viewer activity	Views, clicks, saves, claims, timestamps, approximate country, points and vouchers. Activity may be associated with your account or an anonymous browser identifier.	Your interactions with the service.
Business and ad content	Business name, description, contact or address details, business coordinates, ad text, images, videos, links, targeting settings and offer conditions.	Business owners submit this information.
Location and preferences	Approximate country inferred from IP address, selected currency or region, and latitude/longitude if you choose to share device location. Device coordinates may be precise.	Network information, your selections and browser geolocation permission.
Push notifications	Push subscription endpoint, encryption keys and any location supplied for nearby alerts.	Your browser when you enable flash alerts.
Payment records	Payment-provider references, campaign reference, amount, currency and payment status. We do not store full card numbers or card security codes.	Checkout activity and payment-provider confirmations.
Technical and support information	IP address, browser/request information, cookies, security or audit events and messages you send us.	Normal service operation and your communications.

Business profile details and advertisement content intended for publication can be visible to other users. Do not include confidential information or another person’s personal details unless you have a lawful basis to share them.

3. How and why we use information

Provide the service: create and authenticate accounts, publish campaigns, save offers, maintain rewards and support users.
Process and confirm payments: connect a payment to its campaign, reconcile transactions and address billing disputes.
Make discovery relevant: display regional offers and currency preferences, and provide location-based features you choose to enable.
Deliver requested communications: send verification and password-reset emails, necessary account messages and push notifications you permit.
Measure activity and protect the platform: calculate campaign analytics, recognise unique views, investigate misuse, moderate ads and prevent fraud.
Comply with legal obligations: maintain necessary records and respond to valid legal requests.

Depending on the processing and applicable law, the relevant legal basis may be performance of a contract, consent, a legal obligation or a legitimate interest in providing a safe and effective service. Where consent is required, you may withdraw it. We do not use this notice as consent for unrelated optional marketing or as a waiver of privacy rights.

Hosting and storage: Replit provides application hosting and infrastructure, including database and object-storage services used by the app.
Media delivery: Cloudinary stores and delivers uploaded advertising images and videos.
Sign-in: Google processes information when you choose Google sign-in. Email/password authentication is managed by Archersboard, not Replit sign-in.
Payments: Paystack or Flutterwave processes payment and billing information when used at checkout. These providers have their own privacy notices.
Email delivery: the configured email-delivery provider, currently Brevo, processes recipient information and transactional email content.
Browser services: browser push providers deliver permitted notifications. Google Fonts supplies fonts used by the site and receives normal network-request information when those fonts load.
Advertisers: campaign owners receive performance counts and interaction reports, which may include timestamps, country information and whether activity came from a registered user or guest. These reports do not expose viewer names or email addresses.
Legal or business needs: information may be disclosed to comply with valid legal requirements, protect rights or safety, or support a business transfer subject to appropriate protections and any required notices.

We do not sell or rent your personal information. Visiting an advertiser’s external link can disclose information directly to that advertiser or website; review its privacy notice before submitting personal details.

5. Cookies and similar technologies

Login session: the connect.sid cookie connects your browser to a server-side session. Sessions normally last up to seven days and can end earlier when you sign out or access is revoked.
Anonymous activity: the ab_aid cookie identifies a browser for activity measurement and unique-view counting. It is configured to last up to one year and is not an email address or account name.
Preferences: region and currency cookies, such as country and cur, may retain your selections for up to one year.

You can remove or block cookies through your browser settings. Blocking session cookies can prevent sign-in or other account features. Cookie duration is separate from the retention of server-side activity records. We do not currently use third-party advertising cookies for cross-site ad targeting; third-party services may still receive network-request information.

6. Location and notification choices

Basic regional discovery can use an approximate country inferred from IP address without requesting device location. More specific location features and nearby flash alerts can use coordinates you explicitly share through your browser.

You can disable notifications and location permission in your browser or device settings. This stops future permitted access but does not automatically delete coordinates or subscriptions already stored by Archersboard. Contact us if you want stored location or subscription information removed.

7. Storage, international processing and retention

Our service providers may process information in countries other than your own, including outside Nigeria. Applicable rules may require contractual protections or another permitted transfer mechanism. Contact us for information about the arrangements that apply to your data.

We retain information for as long as reasonably necessary for the purposes described here, including account operation, campaign records, security, dispute resolution and legal obligations. Retention depends on the type of information and applicable requirements; we do not promise a single automatic deletion period for all records.

When information is no longer needed, it should be deleted or de-identified, subject to lawful retention and backup-recovery requirements. If you request account closure or deletion, we may retain records that are necessary for compliance, fraud prevention or an unresolved dispute, and explain relevant exceptions.

8. Your privacy rights

Depending on your location and applicable law, you may have rights to:

Request access to and a copy of your personal information.
Correct inaccurate information or request deletion.
Object to or restrict certain uses, and request data portability where applicable.
Withdraw consent without affecting processing that was lawful before withdrawal.
Complain to the Nigeria Data Protection Commission at ndpc.gov.ng, or the relevant authority in your country.

Send requests to the contact below. We may need to verify your identity before releasing or changing information. We will respond within the period required by applicable law and explain any lawful limitations. Do not email your password, a full payment-card number or identity documents unless we have established a suitable secure process.

9. Security

We use measures intended to protect information, including HTTPS in hosted use, password hashing, hashed verification and reset tokens, protected session cookies and access controls. No online service is completely secure. You should use a strong, unique password and protect access to your email and Google account. Report suspected unauthorised access using the contact below.

10. Children

Archersboard is intended for adults aged 18 and above. We do not knowingly collect personal information from children. If you believe a child has supplied information, contact us so we can investigate and take appropriate action.

11. Changes to this policy

We may update this notice as the service and applicable requirements change. The date above identifies the current version. Material changes will be communicated where required. We will obtain new consent where applicable law requires it; continued use does not replace consent where consent is necessary.

12. Contact

For privacy questions, access requests, corrections, deletion or security concerns, email jalapenosmoke@gmail.com with the subject “Archersboard privacy request”.

Related document: Archersboard Terms of Service.