Privacy Policy

1. Who is responsible for your information?

StoveBoosting operates stoveboosting.store. For privacy questions or requests, contact support@stoveboosting.store with “Privacy request” in the subject. We will verify your identity before making account changes.

2. Information we collect

• Account details: name, email address, account role, creation date, and a password hash when you use email and password. For Google sign-in, we receive your name, email address, and Google account identifier; we do not receive your Google password.
• Orders: selected service, destination profile or post URL, quantity, order status, provider reference, timestamps, and the amount charged or refunded.
• Wallet and payments: wallet balance and ledger entries; payment reference, amount, currency, status, and transaction identifier returned by Paystack. Card numbers, card security codes, PINs, and one-time payment codes are handled by Paystack and are not requested or stored by StoveBoosting.
• Support: the messages and account details you send through in-account support chat.
• Technical and cookie data: the necessary session cookie described below. Our hosting and security providers may process request and diagnostic information to operate and protect the website.

3. Why we use it

We use this information to create and secure accounts, authenticate sign-ins, display wallet and order history, submit the requested service order, verify payments, prevent misuse, answer support requests, maintain records, and meet legal requirements. We rely on the steps needed to provide the service you request, legitimate interests such as account security and service operation, legal obligations where applicable, and consent where consent is the appropriate basis.

4. When we share information

We share only the information needed for the purposes below:

• Google sign-in: when you choose Google sign-in, your browser connects to Google to authenticate you. Google returns basic profile details needed to identify or create your StoveBoosting account. Google’s processing is covered by Google’s Privacy Policy.
• Payment processor: Paystack receives checkout information needed to process and verify a payment. StoveBoosting receives the payment reference and confirmation details.
• Service fulfillment providers: the selected provider receives the service identifier, destination URL, and quantity needed to process an order. Do not submit a password, login code, or private account credential as an order link.
• Hosting and database providers: providers supporting website hosting, application delivery, database storage, and security process information on our behalf.
• Currency-rate source: our server requests a currency reference rate. The request does not include your account or order details.
• Legal and safety disclosures: we may disclose information if required by law or reasonably necessary to protect users, the service, or our legal rights.

These providers may process information in countries other than your own. Their processing is also subject to their own terms and privacy notices.

5. Cookies and similar storage

StoveBoosting uses a necessary cookie named stove_session to keep you signed in. It contains a signed session token, is marked HttpOnly, uses Secure connections in production, uses SameSite=Lax, and expires after seven days. Google sign-in also uses short-lived, HttpOnly, SameSite=Lax cookies to protect the sign-in flow; these expire after ten minutes. The app does not currently use advertising or analytics cookies. If you sign out, the session cookie is cleared.

The site also loads web fonts from Google Fonts. Your browser contacts Google’s font service to retrieve those files; Google may receive technical request data under its own privacy terms.

6. Retention

We keep account, order, wallet, payment, and support records for as long as needed to operate the account and service, resolve issues, maintain financial records, prevent fraud, and meet legal obligations. The application does not currently publish a fixed deletion period for each record type. You may ask us to review or delete account information; some records may need to be retained where the law permits or requires it.

7. Security

We use safeguards intended to protect information, including hashed passwords, signed sessions, access controls, and payment verification. No online service can guarantee absolute security. Protect your email account and never share your password, payment credentials, or one-time codes.

8. Your privacy rights

Subject to applicable law, you may request access to your personal information, correction of inaccurate information, deletion or restriction of processing, object to certain processing, request a portable copy where applicable, or withdraw consent where processing relies on consent. Send requests to support@stoveboosting.store. We may ask for reasonable information to verify the request and may retain information where required by law.

If you are in Nigeria, you may also contact the Nigeria Data Protection Commission. See the Nigeria Data Protection Act 2023.

9. Children

StoveBoosting is not designed for children. If you believe a child has provided personal information, contact us so we can review the account and information.

10. Changes and contact

We may update this policy when our services or legal obligations change. The current version and effective date will be posted on this page. Questions or privacy requests can be sent to support@stoveboosting.store.