Privacy Policy

• Waitlist: your name, email, whether you're a brand or creator, and your phone number if you give it.
• Your account: your name, email, password (stored scrambled; we can't read it), phone number if you add it, and whether you're a brand or creator.
• Creators: your social media handles, links to the clips you submit, the screenshots of view counts you upload, view counts and earnings.
• Creator bank details: your bank, the name on the account and the last 4 digits of the account number. Paystack holds the full number so it can send your payouts; we don't store it.
• Brands: your campaign details and records of your payments. Card details are entered on Paystack's page and never reach Korareel.
• Security: to stop spam and password guessing, we count tries from each internet address. We store a scrambled code, not the address itself, and delete it within 2 days. Our hosting provider keeps short technical logs that include internet addresses.
• Cookies and device storage: only what's needed to keep you logged in and remember which of your social accounts you're viewing, plus your light or dark mode choice, saved on your device. We don't use advertising or tracking cookies.

• To create your account and run campaigns, reviews, earnings and payouts (our agreement with you).
• To check that social and bank accounts really belong to you, and to find fake views and fraud (keeping Korareel fair and safe).
• To send you emails about your account: clip reviews, payouts, campaign updates and changes to your bank details.
• To send waitlist updates, because you asked for them. You can ask us to stop at any time.
• To keep the payment and tax records the law requires.

We don't sell your data, and we don't use it for advertising.

Only the services that run Korareel, and only what each one needs:

• Paystack: brand payments, refunds, bank account checks and creator payouts.
• Supabase: our database, log-ins and file storage.
• Vercel: hosting the website.
• Resend: sending our emails.

Brands see the handles, clip links and view counts of clips submitted to their campaigns. They don't see creators' emails, phone numbers or bank details.

We may also share data if the law requires it, or to stop fraud. Some of these services store data on servers outside Nigeria. We only use providers that protect it with security measures such as encryption.

Korareel uses YouTube API Services. If you choose Connect with YouTube, Google asks you to let Korareel see your YouTube account. This is read-only: Korareel can't upload, change or delete anything.

• What we read once, when you connect: your channel's ID, name and @handle, to confirm the channel is yours. We don't keep Google's access key afterwards.
• What we read after that: the public view, like and comment counts, publish date and visibility of the Shorts you submit to campaigns, every few hours while a campaign runs. We use these only to work out your earnings, show brands their results and spot fake views.
• We don't sell this data, use it for advertising, or share it beyond what's described in this policy. Brands see view counts for clips in their own campaigns.
• Removing access: you can remove Korareel's access at any time in your Google account at myaccount.google.com/permissions. To unlink your channel from Korareel, email support@korareel.com. When a channel is unlinked we stop reading its data, and delete its YouTube data within 30 days, apart from the payment records the law requires us to keep.

By connecting YouTube you also agree to the YouTube Terms of Service, and Google's handling of your data is covered by the Google Privacy Policy.

• Account data: while your account is open. When you close it, we delete it within 90 days.
• Payment, refund and payout records: as long as Nigerian tax and accounting law requires, even after you close your account.
• Waitlist details: until launch, or until you ask us to remove them.
• Security counts: deleted within 2 days.

Under the Nigeria Data Protection Act 2023, you can ask us to:

• give you a copy of your data;
• correct data that's wrong;
• delete your data, unless we must keep it by law;
• stop or limit how we use it, or stop sending you updates;
• send your data to you in a format you can move to another service.

Email support@korareel.com from the email on your account. We'll reply within 30 days. If you're not happy with our answer, you can complain to the Nigeria Data Protection Commission (NDPC).

We use encrypted connections (HTTPS), access controls so each person only sees their own data, and limits on repeated tries. Only a small number of Korareel staff can see account details, and only to review clips, handle payouts or help you. If a data breach puts you at risk, we'll tell you and the NDPC as the law requires.

Korareel is only for people 18 and older. If we learn that someone under 18 has an account, we'll close it and delete their data.

If we change this policy in an important way, we'll email you before the change starts and update the date at the top of this page.