Privacy Policy

1. Introduction

Welcome to 2x ("2x", "we", "us", or "our"). 2x is an influencer-brand marketplace that connects small and medium-sized businesses with micro and macro content creators across Africa. Our platform facilitates campaign creation, content distribution, performance tracking, and payment processing between brands and creators.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use our platform whether you are a Business (Brand) or a Content Creator. It also describes your rights regarding your personal data.

By registering for or using the 2x platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use our platform.

2. Who We Are

2x Limited is the data controller responsible for the personal information collected through the 2x platform. We operate primarily in Nigeria and across Africa. For data protection inquiries, please contact us at:

• Email: privacy@2xbiz.com
• Address: Nigeria
• Website: www.2xbiz.com

3. Information We Collect

3.1 Information You Provide Directly

When you register and use 2x, we collect the following information depending on your user type:

For Business (Brand) Accounts:

• Full name, email address, and password
• Business name, business category, and type (product or service)
• Business overview, address (street, city, state, country)
• State and Local Government Area (LGA) in Nigeria
• Contact person's name and phone number
• Business website URL (if applicable)
• Campaign details including titles, descriptions, media assets, hashtags, target audiences, and social media handles
• Payment information (we do not store raw card details)

For Creator (Influencer) Accounts:

• Full name, email address, phone number, and password
• Date of birth and gender
• Niche/content category and content description
• State, town/city, and geographic location tag
• Linked social media account information for Instagram, Facebook, and TikTok
• Social media profile URLs submitted for fraud and authenticity verification
• Bank account details for withdrawal
• Content and media files uploaded to the platform
• Unique creator identity assigned by 2x

3.2 Information Collected Automatically

• Pages visited, actions taken, and time spent on the platform
• Session tokens and authentication data
• Affiliate link click data and conversion events
• Real-time earnings data and wallet activity

3.3 Information from Third-Party Platforms (Meta & TikTok)

With your explicit authorization, we access data from the following third-party platforms through their official APIs for the purpose of tracking campaign performance metrics:

From Meta (Instagram and Facebook):

• Instagram Business or Creator account basic profile information
• Post-level metrics: views, likes, comments, and reach on campaign content
• Instagram Insights data: impressions, reach, engagement rate
• Facebook Page metrics: post views, likes, comments, shares, and reach
• We only access the post you submitted a link to

From TikTok:

• TikTok account basic profile information (username, display name, profile picture, follower count)
• Video level metrics for campaign content: view count, like count, comment count, share count
• We only access the post you submitted a link to

We only request and use the minimum data permissions necessary to provide our services. We do not sell, lease, or share Meta or TikTok data with any third party beyond what is necessary.

3.4 Location Data

We collect location information you provide during registration (state, LGA, town/city) and optional map-tagged location for creators. We use this to match creators with geographically relevant brand campaigns.

4. How We Use Your Information

4.1 To Provide and Operate the Platform

• Creating and managing your account
• Facilitating campaign creation, creator matching, and campaign management
• Generating and managing 2x affiliate links
• Processing payments for campaign funding and creator withdrawals
• Displaying real-time analytics and earnings dashboards
• Sending campaign invitations to matched creators via email

4.2 For Performance Tracking and Analytics

• Tracking affiliate link clicks and conversions
• Fetching and displaying social media performance metrics
• Calculating and automating payouts based on verified performance goals

4.3 For AI-Powered Features

• Analysing business profiles to estimate potential creator reach, projected views, conversions, and sales
• Analysing creator profiles to estimate potential brand reach and campaign opportunities
• Improving creator-brand matching algorithms

4.4 For Security and Fraud Prevention

• Scanning submitted social media profile URLs to verify authenticity
• Enforcing the 40% pool cap rule
• Verifying identity through OTP-based email confirmation
• Implementing two-factor authentication for wallet withdrawals

4.5 For Communications and Notifications

• Sending campaign invitations, opt-in confirmations, and campaign status updates
• Notifying creators of wallet credits, campaign endings, and withdrawal results
• Sending platform-related service communications

4.6 For Legal and Compliance Purposes

• Complying with applicable Nigerian laws and regulations
• Maintaining financial records for payment and tax compliance
• Responding to legal requests and enforcing our Terms of Use

5. Legal Bases for Processing Your Data

• Contract Performance: To provide our services to you as agreed when you register on 2x
• Consent: For accessing your social media metrics from Meta and TikTok — you may withdraw consent at any time by unlinking your accounts
• Legitimate Interests: For fraud prevention, platform security, and improving our matching algorithm
• Legal Obligation: For maintaining financial records and complying with applicable laws

6. How We Share Your Information

We do not sell your personal data. We share information only in the following limited circumstances:

6.1 Between Businesses and Creators

Certain creator profile information (niche, location, content style, social metrics) is visible to businesses for matching purposes. Campaign briefs created by businesses are shared with relevant creators.

6.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority.

6.3 Business Transfers

If 2x undergoes a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you before your data is subject to a new privacy policy.

7. Data Retention

• Account data retained for account duration and 3 years after closure
• Campaign data and analytics retained for 5 years
• Payment and transaction records retained for 7 years (Nigerian financial regulations)
• Media content retained until campaign end and 90 days thereafter
• Social media metrics retained for up to 1 year after campaign completion

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encrypted data transmission (HTTPS/TLS) for all platform communications
• Row-Level Security (RLS) policies on our database
• Monetary values stored in kobo (smallest NGN unit) to prevent rounding errors
• OTP-based two-factor authentication for sensitive actions
• Fraud detection systems for social media profile verification

9. Cookies and Tracking Technologies

We use cookies to maintain your session, remember your preferences, and provide real-time updates. We also use our proprietary 2x affiliate link tracking system, which embeds the business's destination link, the creator's unique identifier, and a 2x tracking parameter. This tracking is used solely to calculate creator payouts accurately.

10. Your Rights

Subject to applicable law, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Withdraw Consent: Withdraw consent for social media API data access by unlinking your accounts
• Right to Data Portability: Request your data in a portable format
• Right to Object: Object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@2xbiz.com. We will respond within 30 days.

11. Children's Privacy

The 2x platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us at privacy@2xbiz.com.

12. Third-Party Links and Integrations

Our platform integrates with Meta (Instagram and Facebook) and TikTok. When you connect your accounts, you are also subject to their respective privacy policies. We are not responsible for the privacy practices of these third-party platforms.

13. International Data Transfers

2x primarily operates in Nigeria. Some of our service providers may process data on servers located outside Nigeria. In such cases, we ensure appropriate safeguards are in place in accordance with the Nigeria Data Protection Regulation (NDPR).

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or a prominent notice on the platform at least 30 days before the changes take effect.

15. Contact Us