Privacy Policy

This Privacy Policy explains how Articalsteam (“Dyal”, “we”, “us”) collects, uses, discloses, and protects information about you when you use our marketplace platform at dyal.app (“the Service”). By using the Service you agree to the practices described here.

1. Information we collect

We collect information in three ways:

• You give it to us — name, email address, username, country, profile photo, and (for advertisers) company details when you create an account or a campaign. Payment details are collected and held by our payment processor (Flutterwave); we never see your full card number.
• We get it from your use — IP address, device type, browser, pages visited, timestamps, referring URL, and rough geographic region inferred from your IP. We use this to operate, secure, and improve the Service.
• Third parties give it to us — if you sign in with Google, Google shares your basic profile (name, email, photo) through Firebase Authentication. If you link a TikTok account, we receive your public profile and stats.

2. How we use your information

We use the information we collect to:

• Create and maintain your account.
• Match creators with advertisers and process transactions through escrow.
• Send transactional notifications (order updates, payment receipts, security alerts).
• Detect and prevent fraud, abuse, and violations of our Terms of Service.
• Improve the Service through aggregated analytics. We never sell your personal data to third parties.

3. Legal bases (EEA / UK users)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the legal bases of contract performance (to provide the Service you signed up for), legitimate interest (to keep the platform safe and improve it), and your consent (for non-essential cookies and marketing emails, where applicable).

4. Sharing your information

We share information with:

• The other party in a transaction — when a creator and advertiser agree to work together, we share the information needed to deliver the work (display name, username, message history, deliverable files).
• Service providers — Firebase (authentication, Firestore database, hosting), Cloudinary (media), Flutterwave (payments), and infrastructure providers. Each is bound by appropriate data-processing terms.
• Authorities — when we are legally required to, or in response to a valid legal process.

5. International transfers

We are based in Nigeria, but some of our service providers are located in the United States, European Union, and elsewhere. By using the Service you understand that your information may be transferred to and processed in these countries. We rely on standard contractual clauses and provider-side safeguards (such as Google Cloud’s and Cloudflare’s compliance certifications) to protect your data in transit.

6. Data retention

We keep your account information for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we are required to keep it for legal, tax, or anti-fraud purposes (typically up to seven years for financial records).

7. Your rights

You can:

• Access, correct, or update your profile information from the dashboard settings.
• Request a copy of the personal data we hold about you by emailing privacy@dyal.app.
• Request deletion of your account, subject to the retention rules above.
• Opt out of marketing emails by clicking “unsubscribe” in any email we send. Transactional emails (receipts, security alerts) are not optional.

If you are in the EEA / UK, you also have the right to object to processing, restrict processing, and lodge a complaint with your local data-protection authority.

8. Cookies and similar technologies

We use a small number of strictly necessary cookies to keep you signed in and to protect against fraud. We do not use advertising cookies. If we add analytics cookies in the future we will ask for your consent first.

9. Security

We use industry-standard safeguards — TLS in transit, encryption at rest, role-based access controls, and audited infrastructure — to protect your information. No system is perfectly secure; if a breach affects you we will notify you and the relevant authorities as required by law.

10. Children

Dyal is not directed to children under 18. We do not knowingly collect information from anyone under 18. If you believe a child has created an account, contact us at privacy@dyal.app and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do we will change the “Last updated” date above and, for material changes, notify you by email or in-app. Continued use of Dyal after the effective date constitutes acceptance of the updated policy.

12. Contact

For privacy questions, data requests, or to lodge a complaint, email privacy@dyal.app.