1. Scope and controller
FEWERTOOLS LTD, registered in England and Wales under company number 17022891, with registered office at 607 The Almere Flat 607 The Almere, Avebury Boulevard, Milton Keynes, England, MK9 2GG, is the controller for Outbid Naija account, website, registry, moderation, analytics, waitlist, and support information. The payment provider named before checkout processes checkout and payment information under its own privacy notice and the data-protection role that applies to that activity.
Use the public Support route for privacy questions or rights requests. Do not place card details, bank passwords, PINs, OTPs, or identity documents in an ordinary support message.
2. Information we collect
Waitlist information includes your email address, optional preferred territory, optional representation, consent version and time, acquisition source, and signup timestamps. Account information includes email, username, display name, sign-in and verification records, account status, and an optional linked X handle.
Placement information includes submitted names, statements, links, images, quote details, legal versions accepted, territory, amount, timestamps, and source attribution. Confirmed placement details and history are designed to become public.
Payment records include provider references, status, amount, currency, channel, refund or reversal state, receipt and reconciliation facts, and privacy-safe fraud signals. Our payment providers and their payment partners collect payment credentials; we do not ask for or store your full card number, card PIN, bank password, or payment OTP.
Technical and support information may include IP and user-agent digests, essential cookies, rate-limit and security events, page and attribution events, reports, emails, evidence, and operator actions.
3. How and why we use information
We use information to operate and secure accounts; create quotes; reconcile, refund, and evidence payments; publish the current map and append-only record; generate proof cards; attribute activity; prevent abuse; moderate content; answer support; send requested launch or service messages; comply with law; and evaluate the experiment.
We rely on performing a contract and taking requested pre-contract steps for accounts, quotes, placements, and support; legitimate interests for security, moderation, attribution, analytics, and product evaluation; consent for optional marketing where required; and legal obligations for financial, tax, fraud, and rights records.
4. What becomes public
A confirmed placement can show the submitted representation, patron username or display name, verification label, territory, value, timestamps, and event history. Proof-card links are designed to be shared. A removed or neutralised display may still leave a non-promotional record of the confirmed event.
Do not submit personal information you do not want associated with a public placement, or another person’s information without a lawful basis and any permission required.
5. Providers and international transfers
We use Supabase for database and authentication infrastructure, Vercel for hosting and platform logs, and Resend for transactional email. Depending on the payment method shown, Stripe or Whop may provide hosted checkout, receipts, payment processing, fraud controls, and refunds; restricted verification checkouts may also use Klasha or Bachs. We may also disclose information where required by law, to protect rights and safety, or during a properly managed business transfer.
These providers may process information in the United Kingdom, European Economic Area, United States, Nigeria, or other countries. Where required, we use provider contracts and recognised transfer safeguards. Each provider also publishes its own security and privacy information.
6. Retention
Financial and transaction evidence is normally kept for seven years after the relevant transaction. Public placement history is kept while the registry operates and may be neutralised where content should no longer be displayed. Support and moderation material is normally kept for up to two years after closure; short-lived quotes and routine security logs are deleted or aggregated sooner when no dispute, fraud review, or recovery process needs them.
Waitlist entries are kept while preparing and evaluating the launch. If you opt out, we stop launch updates and may keep only the minimum suppression record needed to respect that choice. A legal hold, chargeback, fraud investigation, safety issue, or rights dispute may require longer retention.
7. Your choices and rights
Subject to applicable law, you may ask for access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Some records may need to remain for payment evidence, fraud prevention, a legal claim, public-record integrity, or another person’s rights.
Send a request through Support from the email connected to the account. We may verify identity before acting. You may also have the right to complain to the UK Information Commissioner’s Office or the Nigeria Data Protection Commission, depending on the processing and law that applies.
8. Security, children, and changes
Controls include restricted database roles, opaque public identifiers, hashed request diagnostics, rate limits, signed payment webhooks, append-only ledger rules, administrative holds, reconciliation jobs, and operator runbooks. No system can guarantee absolute security.
Outbid Naija is not intended for people under 18 and does not knowingly accept paid placements from children. Material changes to this Notice receive a new version and effective date, with additional notice where required.