Privacy Policy — Pill4rs

Pill4rs ("we", "our", or "us") operates the Pill4rs platform at pill4rs.com and the Pill4rs mobile application. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using Pill4rs you agree to this policy. If you do not agree, please stop using the platform.

1. Information We Collect

Information you provide directly

Account details: name, email address, and password when you register.
Business profile: business name, industry, country, and advertising goals entered during onboarding.
Payment details: billing information processed by Flutterwave. We never store raw card numbers.
Content you upload: ad creatives, images, and copy submitted through the publisher module.
Messages: conversations with the AI co-pilot stored to provide context across sessions.

Information from connected ad platforms

When you connect Meta, Google Ads, or TikTok accounts, we receive OAuth access tokens and fetch campaign data (spend, impressions, clicks, ROAS) on your behalf. Tokens are encrypted at rest using AES-256 before storage.

Automatically collected information

Log data: IP address, browser type, pages visited, and timestamps.
Device data: device type and operating system for the mobile app.
Cookies and similar technologies: session cookies for authentication and preference cookies. No third-party advertising cookies are set.

2. How We Use Your Information

To provide and operate the Pill4rs platform and mobile app.
To power the AI co-pilot — campaign context is injected into AI prompts to generate relevant advice. No personal data is used to train AI models.
To process payments and manage subscriptions via Flutterwave.
To send transactional emails (account confirmation, password reset, billing receipts) via our email provider.
To surface nudges and recommendations based on your campaign performance data.
To detect fraud, enforce our Terms of Service, and comply with legal obligations.
To improve the platform through aggregated, anonymised analytics.

We do not sell your personal data to third parties. Ever.

3. Data Sharing

We share data only with the following categories of service providers, solely to operate the platform:

Supabase — database and authentication infrastructure (EU region).
Anthropic — AI inference for the co-pilot. Prompts include your campaign context but not raw personal identifiers.
Flutterwave — payment processing. Governed by Flutterwave's own privacy policy.
Vercel — web hosting and serverless functions.
Ad platforms (Meta, Google, TikTok) — data is fetched from these platforms on your behalf; we do not share your data back to them beyond what you initiate.

We may disclose information if required by Nigerian law, court order, or to protect the rights and safety of our users or the public.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we permanently delete your personal data within 30 days, except where retention is required by law (e.g., financial records for 7 years under Nigerian FIRS requirements).

Campaign performance snapshots are retained for 24 months to support historical reporting.

5. Security

We use industry-standard safeguards including AES-256 encryption for stored OAuth tokens, TLS 1.3 for data in transit, row-level security on our database, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but take every reasonable precaution.

6. Your Rights

Depending on your location, you may have the right to:

Access — request a copy of the personal data we hold about you.
Correction — ask us to correct inaccurate data.
Deletion — request deletion of your account and associated data.
Portability — receive your data in a machine-readable format.
Objection — object to processing based on legitimate interests.

To exercise any of these rights, email us at privacy@pill4rs.com. We will respond within 30 days.

Nigerian users have additional rights under the Nigeria Data Protection Act 2023 (NDPA). You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC).

7. Cookies

We use strictly necessary cookies for authentication sessions and preference cookies to remember your settings. No advertising or tracking cookies are used. You can disable cookies in your browser, but core platform features require session cookies to function.

8. Children

Pill4rs is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, please contact us immediately.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "last updated" date above and notify registered users by email if the changes are material. Continued use of Pill4rs after changes constitutes acceptance.

10. Contact Us

For privacy questions or to exercise your rights, contact us at:

Pill4rs
Lagos, Nigeria
privacy@pill4rs.com