Altar

Privacy Policy

Last updated: June 2026

1. Introduction

Altar (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using Altar, you consent to the practices described in this policy. If you do not agree, please do not use the Platform.

2. Information We Collect

Account Information

When you register, we collect your name, email address, phone number, and a password (stored securely as a hash).

KYC Documents

To verify your identity for withdrawals, we collect government-issued identification documents (NIN, passport, driver's license, or voter's card). These are stored securely on Cloudinary with restricted access.

Bank Information

To process withdrawals, we collect your Nigerian bank account number, bank code, bank name, and account name.

Campaign Content

We collect the content you create, including campaign titles, descriptions, cover photos, wishlist items, and messages to contributors.

Payment Information

We do not collect or store payment card details. All payment processing is handled by Flutterwave, a licensed payment gateway. We receive confirmation of successful transactions but no sensitive financial data.

Usage Data

We automatically collect certain information when you visit the Platform, including your IP address, browser type, operating system, referring URLs, and pages viewed.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Platform
  • Process transactions and withdrawals
  • Verify your identity (KYC)
  • Send transactional emails (e.g., contribution notifications, withdrawal confirmations)
  • Detect and prevent fraud or abuse
  • Comply with legal obligations
  • Send service-related communications

4. Information Sharing

We share your information only with trusted third-party service providers who help us operate the Platform:

  • Flutterwave — Payment processing (contribution payments and withdrawals)
  • Cloudinary — File storage for cover photos and KYC documents
  • Resend — Transactional email delivery
  • Vercel — Platform hosting and infrastructure

We do not sell your personal information to third parties. We may disclose information if required by law or to protect our rights.

5. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Password hashing using bcrypt
  • JWT-based authentication with httpOnly cookies
  • Authenticated access for KYC documents
  • Rate limiting on sensitive endpoints

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we retain data only as required by law or for legitimate business purposes. KYC documents are retained in accordance with regulatory requirements.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal obligations)
  • Withdraw consent where processing is based on consent

To exercise these rights, please contact us through the Platform. We will respond within 30 days.

8. Cookies

We use essential cookies for authentication and platform functionality. We do not use tracking cookies or third-party analytics cookies. You can configure your browser to reject cookies, but this may affect Platform functionality.

9. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Significant changes will be notified to users via email or through the Platform.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us through the Platform or via the support email provided on our website.