Privacy Policy

Data controller

The controller of the personal data processed through Xponsor is UpgradeX, based in Cotonou, Benin. For data-protection questions, contact our data-protection contact at [email protected].

Information we collect

We collect the information you give us when you use Xponsor: account details such as your name and email, profile information, and the content of the fundraisers, events, contests, support pages and badges you create. When you request a payout, we also collect the identity documents and information needed for verification.

We collect limited payment metadata (such as amount, currency and status) from our payment partner, and we automatically gather usage and device data - for example pages viewed and approximate location - to keep the service running and understand how it is used.

How we use your information

We use your information to operate the Platform: to create and secure your account, run Products, process payments and payouts, verify identity, provide support, and send service-related messages. We also use it to improve the product, measure performance, and prevent fraud and abuse.

Legal bases

Where data-protection law applies, we rely on: performing our contract with you (to provide the service); our legitimate interests (to secure and improve the Platform and prevent fraud); your consent (for optional analytics or communications); and compliance with legal obligations (such as identity and anti-fraud requirements).

Payments

Payments are processed by our provider, Moneroo. Your full card numbers and mobile-money credentials are entered with the provider and are not stored by us; we receive only the metadata needed to confirm and reconcile a transaction. The provider processes your payment data under its own privacy terms.

Organizers and their supporters

When you support a Product, some of your data (such as name and contact) is shared with that Organizer so they can deliver what you paid for. For that use, the Organizer is an independent controller of your data and responsible for their own handling of it.

Identity verification data

To meet legal and anti-fraud obligations, we may collect and process identity documents and related details as part of KYC. This information is used only for verification, compliance and fraud prevention, is accessible to a limited number of authorized people, and is retained only as long as necessary for those purposes.

Cookies and analytics

We use strictly necessary cookies to keep you signed in and remember your preferences. For analytics we use Microsoft Clarity, and we may optionally use Google Analytics, to understand how the Platform is used. Where consent is required, such as in the EU, non-essential analytics are not switched on automatically. See our Cookie Policy for details.

Sharing and disclosure

We do not sell your personal data. We share it only with service providers who help us operate - such as our payment and identity-verification partners, hosting, email and analytics providers - and only as needed for those services.

We may also disclose information when required by law, to enforce our terms, or to protect the rights, safety and property of Xponsor, our users, or the public.

Data retention

We keep your information for as long as your account is active and as needed to provide the service. Some data is kept longer where the law requires it - for example, records tied to payments and identity verification. When data is no longer needed, we delete or anonymize it, and deactivated accounts are anonymized.

Security

We use technical and organizational measures - such as encryption in transit and access controls - to protect your information. No system is perfectly secure, so we cannot guarantee absolute protection, but we work to safeguard your data and respond promptly to any incident.

International transfers

Xponsor serves users in West Africa and Europe, and our providers may process data in different countries. Where data is transferred across borders, we take steps to ensure it remains protected in a manner consistent with applicable law, including appropriate safeguards for transfers out of the EU.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct or delete it, to object to or restrict certain processing, to port it, and to withdraw consent where processing is based on it. Exercise these rights by contacting [email protected]. You may also complain to your data-protection authority - in Benin, the APDP; in the EU, your local supervisory authority.

Children

Xponsor is not intended for people under 18, and we do not knowingly collect their personal data. If you believe a minor has provided us with information, please contact us so we can remove it.

Changes and contact

We may update this policy from time to time. When we make material changes, we will take reasonable steps to notify you. The date at the top of this page indicates when it was last revised. Questions: [email protected].