Privacy Policy

Last updated: September 2026

1. Introduction

DMflux is operated by Qorv LTD (“we”, “our”, “us”). We are committed to protecting your personal data in accordance with the Nigeria Data Protection Act 2023 and its General Application and Implementation Directive (GAID) 2025.

2. Data We Collect

We collect data in two categories:

A. Data about DMflux users (TV owners/marketers):

  • —Full name and email address (account registration)
  • —Organization name and branding preferences
  • —Payment information (processed by Paystack — we never store raw card details)
  • —Support messages and attachments

B. Data about ad campaign visitors (people who click tracking links):

When you open a DMflux tracking link (for example dmflux.app/c/…), your click is recorded server-side before you are redirected to the advertiser’s WhatsApp destination. We do not run JavaScript on your device, and we set no cookies on this path.

  • —Click timestamp
  • —Device type, browser, operating system (from your browser’s user-agent header)
  • —Country and city (approximated by Cloudflare’s edge network)
  • —A pseudonymous identifier: a one-way hash of your IP address, user-agent, and language header. The raw IP address is never stored. This identifier is stable between visits — that is how the campaign owner sees unique and returning visitor counts — and it is identical across a single customer’s campaigns: DMflux does not link a person’s clicks across different advertisers’ reports (each advertiser sees only their own campaigns), but the identifier can be correlated within a customer’s own campaigns. The identifier is pseudonymous and cannot be traced back to a real-world identity.

3. How We Use Data

  • —To provide campaign analytics to the TV owner who created the campaign
  • —To detect duplicate clicks and click fraud (deduplication uses short-lived, server-side records that expire within minutes)
  • —To process subscription payments
  • —To send transactional emails (payment receipts, account verification, payment failure warnings)
  • —To respond to support requests

4. Data Sharing

We use the following service providers and other recipients to operate DMflux:

Processors (process data on our instructions):

  • —Vercel (application hosting) — Global
  • —Supabase (database & authentication) — EU (Ireland)
  • —Cloudflare (edge network, click handling, geolocation) — Global
  • —Backblaze (support screenshot storage) — EU Central (Amsterdam)
  • —Resend (transactional email) — United States

Independent controller (payments):

  • —Paystack (payment processing) — Nigeria/Global. Paystack is the data controller for payment card data it collects; DMflux never sees or stores card numbers.

The current list with details lives at dmflux.app/subprocessors. We do not sell personal data to any third party. We do not use data for advertising purposes.

5. Data Retention

  • —Account data: retained for the duration of your account plus 90 days after deletion request
  • —Campaign click data: kept for as long as it is useful for the campaign owner’s analytics and for fraud prevention, after which it is deleted. Because click records are pseudonymous and cannot be linked back to an individual, deletion requests relating to them are handled by deleting the affected campaign’s click history.
  • —Payment records: retained for 7 years as required by Nigerian financial regulations

6. Your Data Protection Rights

Under the Nigeria Data Protection Act 2023, you have the right to:

  • —Access the personal data we hold about you
  • —Request correction of inaccurate data
  • —Request deletion of your data
  • —Restrict the processing of your data
  • —Object to processing of your data
  • —Data portability (export your campaign data as CSV)
  • —Withdraw consent where you have previously given it (without affecting the lawfulness of processing before withdrawal)
  • —Lodge a complaint with the Nigeria Data Protection Commission (NDPC)
  • —Be notified of any automated decision-making that significantly affects you (note: DMflux does not use automated decision-making for its users or campaign visitors)

To exercise any of these rights, contact us at dmflux.labs@gmail.com. We will respond within 30 days.

7. Cookies & Similar Technologies

DMflux uses only essential session cookies required for authentication on the dashboard. We do not use tracking cookies, advertising cookies, or third-party analytics cookies anywhere on the site. Tracking links and public campaign reports set no cookies at all. For the complete register, see dmflux.app/cookies.

8. Children’s Privacy

DMflux is not directed at children under 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We will notify users of material changes via email at least 14 days before they take effect.

10. Contact

Qorv LTD
Email: dmflux.labs@gmail.com
For data protection enquiries, use the subject line “Data Protection Request”.