Privacy Policy

Overview

Phlox ("we", "us", "our") operates getphlox.com, an AI-native influencer marketing platform connecting brands with creators across Nigeria. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over it.

By using Phlox, you agree to the practices described in this policy. If you do not agree, please do not use our platform.

What we collect

We collect different data depending on whether you are a Brand or a Creator on our platform.

For Brands:

• Name, email address, and password (hashed — we never store your plain text password)
• Company name, industry, logo, website, and business description
• Billing and payment information (processed by Flutterwave and Paystack — we do not store card numbers)
• Campaign briefs, target audience descriptions, and content preferences
• Usage data — pages visited, features used, time on platform

For Creators:

• Name, email address, and password (hashed)
• Profile photo, bio, niche categories, and content type
• Social media handles for Instagram, TikTok, Twitter/X, and YouTube
• Social media statistics you provide or that we collect via connected accounts
• Bank account details for receiving payments (stored securely, used only for payouts)
• Content submitted for campaigns

Automatically collected:

• IP address and device type
• Browser type and operating system
• Pages visited and actions taken on the platform
• Cookies and similar tracking technologies

How we use your data

We use your personal data only for the purposes it was collected for:

• Creating and managing your account
• Matching brands with suitable creators using our AI agents
• Processing campaign contracts, content submissions, and approvals
• Sending creator payouts and processing brand payments
• Sending transactional emails — account verification, campaign updates, payment notifications
• Improving the platform through anonymised usage analytics
• Complying with legal obligations
• Detecting and preventing fraud or abuse

We do not use your data for advertising outside of the Phlox platform.

Who we share your data with

We share your data only with parties necessary to operate the platform:

• Flutterwave / Paystack — to process payments and creator payouts
• Cloudinary — to store profile photos and content assets
• Brevo — to send transactional emails
• Anthropic — our AI agents send anonymised campaign briefs and creator data to Claude API for matching and analysis
• Between Brands and Creators — when a creator is matched to a campaign, the brand sees the creator's public profile and stats. The creator sees the brand's campaign brief.

We do not sell your personal data to third parties. We do not share your data with advertisers.

Data retention

We keep your data for as long as your account is active. If you delete your account:

• Your profile data is deleted within 30 days
• Campaign records are retained for 12 months for legal and financial compliance
• Transaction records are retained for 7 years as required by Nigerian financial regulations
• Anonymised, aggregated analytics data may be retained indefinitely

Security

We take reasonable technical and organisational measures to protect your data:

• Passwords are hashed using bcrypt — we never store plain text passwords
• All data is transmitted over HTTPS/TLS
• Bank account details are stored encrypted
• Access to production systems is restricted to authorised personnel

No system is 100% secure. If you discover a vulnerability, please contact us at security@getphlox.com.

Your rights

You have the following rights over your personal data:

• Access — request a copy of the data we hold about you
• Correction — update or correct inaccurate data via your account settings
• Deletion — delete your account and request erasure of your personal data
• Portability — request your data in a machine-readable format
• Objection — object to how we process your data in certain circumstances

To exercise any of these rights, email privacy@getphlox.com. We will respond within 30 days.

Cookies

We use cookies to keep you logged in and to understand how the platform is used. We use:

• Essential cookies — required for the platform to function. Cannot be disabled.
• Analytics cookies — help us understand usage patterns. You can opt out.

We do not use advertising cookies or third-party tracking cookies.

Third-party services

When you connect your social media accounts (Instagram, TikTok, Twitter/X, YouTube), those platforms' own privacy policies apply to that data. We only access what you explicitly authorise.

Links to third-party sites from Phlox are not covered by this policy. We are not responsible for those sites' privacy practices.

Children

Phlox is not intended for anyone under the age of 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us at privacy@getphlox.com and we will delete the account promptly.

Policy changes

We may update this policy as our platform evolves. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. Continued use of Phlox after changes constitutes acceptance of the updated policy.

Contact us

If you have questions about this policy or how we handle your data:

• Email: privacy@getphlox.com
• Website: getphlox.com