Privacy Policy

What we collect

• Account: your email, name and a securely hashed password.
• Your brand: the website or social handle you give us, and what we read from it: colours, logo, fonts, public text and images.
• What you upload: photos, logos and sounds.
• Your carousels: the slides and captions you make and edit.
• Payments: what you bought and when. Card and bank details go straight to our payment providers. We never see or store them.
• Technical: your sign-in session, which records your IP address and browser type, for security. Daily abuse limits use a one-way hash of your IP address, not the address itself. The country your connection comes from, so we can show prices in the right currency.
• Bot check: when you sign up, reset a password or make a carousel, Cloudflare Turnstile checks that you are a person. It looks at signals from your browser and device, and tells us only whether the check passed.
• Waitlist: your email, if you asked to be told when we open.

Why we use it

• To run Tilzix and make your carousels (to perform our contract with you).
• To take payment and keep records the law requires (legal obligation).
• To keep the service secure and stop abuse (legitimate interest).
• To email you about your account, and about launch if you joined the waitlist (consent, which you can withdraw).

We do not sell your data. We do not use it for advertising. We do not use your content to train AI models.

Who we share it with

Only the services that run Tilzix for us, each bound to protect your data:

• Cloudflare: hosting, storage, and the bot check (Turnstile).
• Resend: the emails we send you, such as sign-in links and password resets.
• Google: signing you in, only if you choose Sign in with Google.
• Apify: reading a public Instagram or TikTok profile, only when you give us a handle.
• Amazon Web Services: processing, such as making videos.
• OpenAI: writing slide text and captions. See our AI Disclosure.
• Creem: card payments in dollars, when we offer them.
• Bachs: payments in naira, and dollar payments made by card, bank transfer or crypto.
• Vemetric: visit counts, with no cookies. When you are signed in, your visits are linked to your account number and the name on your account (until you change it, the part of your email before the @), never your full email, so we can see which features people use. Vemetric is a separate company that stores this for us. Guests stay anonymous.

Some of these process data outside Nigeria, including in the United States and the EU. Where they do, we rely on safeguards the law recognises, such as standard contractual clauses.

Cookies

We only use cookies the service needs to work:

• One to keep you signed in.
• One that remembers which currency to show prices in, for a day.
• One that remembers you passed the bot check, for 15 minutes, so you are not asked again while making a carousel.
• Cloudflare's bot check may set its own cookie, for security only.

We use no advertising or tracking cookies, so there is no cookie banner.

How long we keep it

• Account, brands, uploads and carousels: until you delete them or your account.
• Payment records: six years, as tax law requires.
• Waitlist emails: until we email you at launch. If you do not sign up after that, we delete them.

Your rights

You can ask to see, correct, download or delete your data, object to how we use it, or withdraw consent. You can delete your account and everything in it yourself from Settings. For anything else, email hello@tilzix.com and we will reply within 30 days. You can also complain to the Nigeria Data Protection Commission, or to your local data protection authority.

Children

Tilzix is not for anyone under 16. We do not knowingly collect their data.

Security

Data is encrypted in transit. Passwords are hashed. Access is limited to what is needed to run the service.

Changes

If we change this policy in a way that matters, we will tell you before it takes effect.

Contact

Xalvro Technologies LLP. Email hello@tilzix.com.