Privacy Policy

BOXOUT AFRICA LTD ("BoxOut", "BoxOutAfrica", "we", "us", or "our"), a company registered in the Federal Republic of Nigeria, respects your privacy. This Privacy Policy describes how we handle personal data when you visit our website, create an account, submit a profile or application, make a contribution, use our AI tools, or otherwise interact with our services (the "Platform").

We are the data controller for personal data described in this policy. BOXOUT AFRICA LTD is registered in the Federal Republic of Nigeria. If you have questions, contact us at hello@boxoutafrica.com.

Depending on how you use the Platform, we may collect:

Account and identity data

• Name, email address, password (stored in hashed form), phone number, and location.
• User type (e.g. creator, funder), bio, and profile picture.
• Social and web links you choose to provide (e.g. Twitter, LinkedIn, website).
• Authentication data from sign-in providers such as Google, where you use them.

Talent and application data

• Profile details, portfolio media, achievements, funding goals, and verification documents.
• Accelerator, engagement lead, partner, and programme application responses.
• Messages and enquiries you submit through contact or interest forms.

Transaction data

• Contribution amounts, payment status, and transaction references processed via Stripe.
• We do not store full payment card numbers on our servers.

AI tool inputs and outputs

• Text you submit to our business validation and talent assessment tools, and the reports generated in response.

Technical and usage data

• IP address, browser type, device information, pages viewed, and referral URLs.
• Session cookies and similar technologies needed to keep you signed in and secure the Platform.
• Analytics data collected through Google Analytics to understand how the Platform is used.

Communications

• Emails we send (welcome, verification, password reset, application updates, confirmations).
• Records of support correspondence when you contact us.

We use personal data to:

• Create and manage your account and authenticate your access.
• Review, verify, publish, and moderate talent profiles and applications.
• Process contributions and communicate about funding activity.
• Operate AI-powered validation and assessment features you request.
• Send transactional emails and, where permitted, service-related updates.
• Respond to enquiries and provide customer support.
• Improve Platform performance, security, and user experience.
• Detect fraud, abuse, and violations of our Terms of Service.
• Comply with legal obligations and enforce our agreements.

In Nigeria, we process personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and applicable regulations issued by the Nigeria Data Protection Commission (NDPC).

If you are in Nigeria, the UK, the EEA, or another jurisdiction with similar data protection laws, we rely on:

• Contract — to provide the Platform and features you sign up for.
• Legitimate interests — to secure the Platform, prevent fraud, improve our services, and communicate with you about your account, balanced against your rights.
• Consent — where required for optional marketing, non-essential cookies, or specific processing you can withdraw at any time.
• Legal obligation — where we must retain or disclose data to comply with law.

We do not sell your personal data. We may share it with:

• Service providers who help us run the Platform — including cloud hosting (Neon), email delivery (Resend), payment processing (Stripe), file storage (Azure), AI inference (Azure OpenAI), and analytics (Google). These providers process data on our instructions and under contractual safeguards.
• Talent and funders — when you express interest in a profile, submit an application, or approve publication, relevant information may be shared with the parties involved in that interaction.
• Professional advisers — lawyers, accountants, or insurers where reasonably necessary.
• Authorities — when required by law, court order, or to protect rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to appropriate notice where required.

We use cookies and similar technologies to:

• Keep you signed in and maintain secure sessions.
• Remember preferences and protect against abuse.
• Measure traffic and usage patterns through Google Analytics.

You can control cookies through your browser settings. Blocking essential cookies may prevent parts of the Platform — including sign-in — from working correctly. Where required by law, we will seek consent for non-essential analytics cookies.

We retain personal data only as long as necessary for the purposes described in this policy, including:

• Account data — for as long as your account is active, then deleted or anonymised within a reasonable period unless we must retain it for legal reasons.
• Application and profile data — for the review period and, if approved, for as long as the profile remains published or as needed for programme administration.
• Transaction records — as required for accounting, tax, and payment dispute resolution (typically up to seven years where applicable).
• AI tool inputs — for the duration needed to generate your report and improve service reliability, then deleted or anonymised unless you save outputs to your account.
• Server logs and security records — for a limited period consistent with security and troubleshooting needs.

We implement technical and organisational measures designed to protect personal data, including encryption in transit, access controls, hashed passwords, and restricted internal access. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

If you believe your account has been compromised, contact us immediately at hello@boxoutafrica.com.

BOXOUT AFRICA LTD operates globally with team members and infrastructure in multiple regions. Your data may be processed in countries outside your own, including Nigeria, the United Kingdom, European Union, United States, and other locations where our service providers operate. Where required, we use appropriate safeguards to protect data transferred internationally.

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data, subject to legal retention requirements.
• Object to or restrict certain processing.
• Request portability of data you provided in a structured format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) or your local data protection authority.

To exercise these rights, email hello@boxoutafrica.com. We may need to verify your identity before responding. We aim to respond within one month.

The Platform is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take steps to delete it.

The Platform may link to external sites, social networks, or community channels (including messaging apps). This policy does not apply to those third parties. Review their privacy policies before sharing information with them.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the latest version. Material changes will be communicated through the Platform or by email where appropriate.

For privacy questions or requests:

BOXOUT AFRICA LTD
Registered in the Federal Republic of Nigeria
Email: hello@boxoutafrica.com
Website: boxoutafrica.com