Privacy Policy

Privacy Policy

Last updated: May 2025

This Privacy Policy explains how AfriNum (operated by BLACK HUSTLR VENTURES LTD) collects, uses, and protects your personal data when you use our platform. By using AfriNum, you agree to the practices described here.

1. Information we collect

  • Account information: When you register, we collect your name, email address, and a hashed version of your password. We never store your password in plain text.
  • Transaction data: We record wallet funding events, virtual number purchases, and refunds. This includes amounts, timestamps, and provider-assigned order IDs.
  • Usage data: We log API requests, page visits, and feature usage to diagnose issues and improve the platform. Logs are retained for 30 days.
  • Device information: Your IP address and browser user-agent are captured by our rate-limiting system. These are not linked to your identity and are not sold.

2. How we use your data

  • To provide the service: Your email and name are used to identify your account and send transactional emails (verification, password reset, OTP notifications).
  • To process payments: Your wallet balance and transaction history are maintained to facilitate purchases and refunds.
  • To prevent fraud: IP addresses and usage patterns help us detect and block abusive behaviour.
  • To communicate with you: We send email notifications for significant account events. We do not send unsolicited marketing emails.

3. Third-party services

  • Paystack (paystack.com): Handles all payment processing. Your card and bank details are processed directly by Paystack and are never stored on AfriNum servers. Paystack is PCI-DSS compliant.
  • 5SIM (5sim.net): Provides virtual phone numbers. When you purchase a number, a request is made to 5SIM on your behalf. No personal information beyond the required service parameters is shared.
  • Resend (resend.com): Delivers transactional emails. Your email address is transmitted to Resend to send verification and notification emails.
  • ExchangeRate API: Used to fetch live USD/NGN exchange rates. No user data is shared.

4. Data retention

  • Account data is retained for the lifetime of your account and for 90 days after deletion.
  • Transaction records are retained for 5 years to comply with financial record-keeping obligations.
  • Server logs are retained for 30 days and then permanently deleted.

5. Your rights

  • Access: You may request a copy of all personal data we hold about you.
  • Correction: You may update your name and email at any time from your profile settings.
  • Deletion: You may request deletion of your account and associated data. Transaction records required for legal compliance will be retained in anonymised form.
  • Portability: You may request your transaction history in CSV format by contacting support.

6. Security

  • All data in transit is encrypted using TLS 1.2 or higher.
  • Passwords are hashed using bcrypt before storage.
  • Database access is restricted to application servers only — no public access.
  • We conduct periodic security reviews of our infrastructure.

7. Cookies

  • AfriNum uses a single authentication cookie (afrinum_token) to maintain your session. This cookie is strictly necessary for the service to function and does not track you across other websites.
  • We do not use advertising cookies, analytics cookies, or third-party tracking scripts.

8. Contact for privacy concerns

  • For any privacy-related requests or questions, contact us at support@afrinum.com. We aim to respond within 5 business days.
  • AfriNum is operated by BLACK HUSTLR VENTURES LTD, Ibadan, Nigeria.

Questions about this policy? support@afrinum.com