1Who we are
Buzz is operated by Victhereum Technologies Ltd, No 8 Flourish Close, Rumuogunuma, Eneka, Port Harcourt, Rivers State, Nigeria (“Buzz”, “we”, “us”). This policy explains what personal data Buzz handles, why, and the choices you have.
For organizer accounts, we decide how your data is used, so we are responsible for it (the “controller”).
For entrants, the organizer who runs a campaign decides how entrants’ data is used for that campaign and is responsible for it. We handle it on their behalf to run the campaign. We also use some entrant data ourselves, as described below, to keep Buzz secure and fair.
2What we collect from organizers
- Account details: your email address and name.
- Google sign-in: if you choose it, Google shares your name, email address and profile picture with us. We don’t get access to your Google account, contacts, files or password.
- Verified social accounts: when you verify an X or Instagram account, the platform tells us its account ID, handle and display name. We use them to show your campaigns come from you. We don’t keep access to the account, read your posts or followers, or post anything.
- Sign-in sessions: the IP address and browser type for each signed-in session, to keep your account secure.
- Your campaigns: everything you create in your workspace, including text, rules, images, prizes and delivery photos, and a record of actions such as publishing, draws and decisions.
- Payments: what you bought, the amount, the currency and the type of payment method. Our payment partner Bachs handles your card or bank details; we never see or store them.
3What we collect from entrants
- To enter: your email address and the name you give. We store your email address encrypted.
- Your entries: the actions you complete and anything you submit for them, such as links, answers, codes or photos. Also your referral link, and who joined through it.
- Your choices: that you accepted the campaign’s rules, and whether you agreed to hear from the organizer. That second choice is separate and always optional.
- Fairness checks: signals that help spot duplicate or automated entries. For example, we keep a scrambled code for the broad network range you entered from, never your IP address itself. We don’t fingerprint your device.
- If you win: the details your prize needs, such as a delivery address, phone number or bank account for a cash prize. They’re stored encrypted, and only the organizer can see them. You also choose whether your first name may appear on the public proof of delivery.
4How we use it
- To run Buzz: signing you in, hosting campaigns, recording entries, running draws and handling claims and deliveries.
- To send the emails the service needs: sign-in links, entry codes, winner and delivery emails, and notices about your campaigns and payments.
- To keep campaigns fair and Buzz secure: detecting fraud and abuse, and investigating problems.
- To process payments and keep the records the law requires.
- To answer you when you contact us.
We use your data because it’s needed to provide the service you asked for, because we have a legitimate interest in keeping it secure and fair, because the law requires it, or, for marketing from an organizer, because you agreed. We don’t sell personal data, show ads or use it to build advertising profiles.
6What’s public
- Campaign pages, including the organizer’s name, contact email, prizes, rules and verified X or Instagram handles.
- Referral leaderboards, where an organizer turns them on, show entrants’ first names and last initials.
- Proof of delivery pages show the prize, the dates, the organizer’s caption and photo, and the winner’s first name and last initial only if they agreed. Otherwise they show a short winner reference.
8How long we keep it
We keep organizer accounts while they’re open, and campaign data while the campaign exists. Sign-in links and entry codes expire within minutes. Payment records are kept as long as tax and accounting law requires.
Some records are permanent by design: entry records, draw results and published proof of delivery can’t be edited or deleted, so anyone can trust them. When you ask us to delete your data, we delete or anonymise what we can and tell you what has to stay and why.
9How we protect it
All traffic is encrypted in transit. Entrants’ email addresses, winners’ delivery details and private notes are encrypted at rest. Access is limited to the workspace that owns a campaign. Every uploaded image is scanned before anyone can see it. No system is perfectly secure, so if a breach affects you, we’ll tell you and the authorities as the law requires.
10Your rights
Depending on where you live, you can ask to see the personal data we hold about you, correct it, delete it, receive a copy, or object to or limit how we use it. You can withdraw marketing consent at any time.
Email [email protected]. We may need to confirm it’s you first, and we’ll answer within the time the law allows. For data an organizer holds about their campaign, you can also contact them directly; we’ll pass on requests that reach us. You can also complain to the data protection authority where you live.
11International transfers
Buzz and its service providers may process data in countries other than yours. When we do, we use the safeguards the law requires, such as standard contractual clauses.
12Children
Organizer accounts are for people aged 18 and over. Each campaign sets its own minimum age for entrants, and Buzz isn’t meant for children under 13. If you think a child has given us personal data, contact us and we’ll remove it.
13Changes to this policy
We’ll update the date at the top when this policy changes and, for important changes, tell organizers by email or in the app before they take effect. See also our Terms of Service.
14Contact
Privacy questions and requests: [email protected]. Anything else: [email protected]. Victhereum Technologies Ltd, No 8 Flourish Close, Rumuogunuma, Eneka, Port Harcourt, Rivers State, Nigeria.