CILBUP
Login
SignUp

Privacy Policy

How we collect, use, and protect your information

Last updated: October 2026

Introduction

Welcome to Cilbup ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our anonymous messaging platform with paid priority features.

By using our Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

  • Account Information: When you create an account, we collect your email address, username, and password (encrypted and hashed).
  • Profile Information: Display name, bio, and avatar that you choose to share publicly.
  • Payment Information: For earnings withdrawals, we collect the payout details required by the active payment processor (e.g. bank account details or wallet address). Payment details for sending paid messages (card, bank transfer, or cryptocurrency) are processed directly by our third-party payment processors — we do not store your card or wallet credentials.
  • Phone Number: If you enable WhatsApp notifications, we collect your phone number.
  • Settings: Your preferences for notifications, privacy, paid messages, and payout settings.

Information Collected Automatically

  • Device Information: Browser type, operating system, device identifiers.
  • IP Address: We collect IP addresses for security, rate limiting, and abuse prevention.
  • Usage Data: Pages visited, features used, time spent on the platform.
  • Cookies: We use cookies and similar technologies to maintain your session and preferences.

Anonymous Messages

When someone sends you an anonymous message:

  • We do not share any identifying information about the sender with the recipient.
  • Messages are linked only to the recipient's account.
  • We don't store the sender's IP address with the message. We store a sender fingerprint: a one-way, keyed code made from the connection the message came from. It can't be turned back into an IP address and doesn't tell us who someone is, but it lets us block a sender who abuses Cilbup and spot spam sent to many creators.
  • We briefly use the sender's IP address to limit how many messages one connection can send; it isn't kept with the message.
  • If a message includes a paid boost, the sender's email (if provided) is passed to our third-party payment processor for payment processing and receipts. This email is not shared with the recipient. Payments made via cryptocurrency do not require an email.

Payment Data & Legal Compliance

Important disclosure about paid messages:

When a fan sends a paid boost with their message, we retain the following information:

  • Sender's email address (if provided for payment processing)
  • Transaction reference or intent address (unique identifier for the payment)
  • Payment timestamp and amount
  • Payment method (card, bank transfer, or cryptocurrency)

This information is stored securely and is never shared with message recipients. However, it may be:

  • Used by our third-party payment processors to verify and process the transaction
  • Disclosed to law enforcement or government authorities if legally required (e.g., court order, fraud investigation, or compliance with applicable financial regulations)
  • Used to investigate and resolve payment disputes or chargebacks

Why we retain this data: Financial regulations and anti-money laundering (AML) laws require payment platforms to maintain records of transactions. This data helps us comply with legal obligations and protect both creators and fans from fraud.

Currency & Geographic Scope

Cilbup supports multiple payment methods and currencies depending on the active payment processor:

  • Paid messages may be processed in fiat currencies (e.g. NGN, USD) or cryptocurrency (e.g. USDC)
  • Payouts are made via the payout method supported by the active processor (e.g. bank transfer or crypto wallet)
  • We serve users globally, with availability depending on the supported payment processors

Supported currencies and payout methods may change as we add or update processors.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Process paid message transactions and payouts
  • Send notifications via email and/or WhatsApp
  • Verify your identity for withdrawals and account security
  • Respond to your comments and questions
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent transactions and abuse
  • Comply with legal obligations
  • Personalize and improve your experience

WhatsApp Notifications

If you enable WhatsApp notifications:

  • We send you notifications about new messages and boosts via WhatsApp
  • Your phone number is stored securely and used only for platform notifications
  • You can disable WhatsApp notifications at any time in your settings
  • We do not share your phone number with other users or third parties (except our messaging service provider)

Information Sharing

We do not sell your personal information. We may share information in these circumstances:

  • Payment Processors: With our third-party payment processing partners (including Bachs.io) to facilitate card, bank transfer, mobile money, and crypto payments and payouts.
  • Cardholder Data Security: Cilbup does not store, process, or transmit full credit or debit card numbers, CVCs, or PINs on our servers. All card transactions are handled directly by PCI-DSS Level 1 certified payment gateways.
  • Service Providers: With third parties who perform services on our behalf (e.g., hosting, email delivery, WhatsApp messaging).
  • Legal Requirements: If required by law, court order, or in response to valid legal requests from Nigerian authorities or other jurisdictions.
  • Safety & Abuse Prevention: To protect the safety of users, investigate abuse, or enforce our Terms of Service.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.
  • Consent: With your consent or at your direction.

Data Security

We implement appropriate security measures to protect your personal information, including:

  • Encryption of sensitive data in transit (HTTPS) and at rest
  • Secure password hashing (bcrypt)
  • Access controls and authentication
  • Regular security assessments
  • Rate limiting to prevent abuse

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Delete your personal information
  • Export your data in a portable format
  • Opt-out of certain data processing
  • Withdraw consent for optional features (like WhatsApp notifications)

To exercise these rights, please contact us through your account settings or via email.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may retain certain information after account deletion for:

  • Legal obligations (e.g., tax records for financial transactions)
  • Dispute resolution
  • Fraud and abuse prevention
  • Enforcing our Terms of Service

Account Deactivation & Deletion

When you deactivate your account:

  • Immediate effect: Your profile becomes inaccessible, you cannot log in, and you cannot receive messages
  • 30-day grace period: Your account data is retained for 30 days. During this period, you can contact our support team to restore your account
  • Permanent deletion: After 30 days, your account and personal data (profile, messages, settings) are permanently deleted

Exception for financial records: Transaction history (paid messages, withdrawals) may be retained for up to 7 years as required by Nigerian tax and financial regulations, even after permanent deletion.

To restore your account within the grace period, contact support@cilbup.site with your registered email address.

Children's Privacy

Our Service is not intended for users under the age of 18.

We do not knowingly collect personal information from individuals under 18. If we learn we have collected such information, we will delete it promptly.

If you believe a minor is using Cilbup, please contact us immediately.

Anonymous Messaging & Privacy

For Message Senders

  • Your messages are anonymous to the recipient
  • We do not share your identity with recipients
  • We keep a sender fingerprint with each message (a one-way code, not your IP address) so abusive senders can be blocked; it doesn't identify you
  • Messages are checked automatically for spam (for example banned words, links, phone numbers, or the same text sent to many people). A flagged message still reaches the creator, who chooses whether to see it
  • If you send a paid boost, your email is used only for payment processing (not shared with recipient)
  • Sent-messages list: after you send a message, your browser keeps a short list of what you sent (the creator, the start of the text, any tip) with a private receipt code. It's stored only on your device; we keep only a one-way code that lets us check a receipt, so we can't list or link your messages. Clearing your browser data removes the list.
  • Reporting a creator: you can use that list to report the creator you messaged, for example if you were forced or tricked into paying. Our safety team sees your report and the message it's about. If the report concerns a tip, the tip may be held from the creator while we review it, and refunded if the report is upheld.

For Message Recipients (Creators)

  • You receive messages without knowing who sent them
  • You can report a message or block its sender. Blocking only affects your inbox, and the sender isn't told
  • You can choose to hide messages our spam checks flag, or see them with a warning
  • You control your profile visibility and notification preferences

Message Safety & Staff Access

Cilbup staff don't browse inboxes. A member of our safety team can read a message only when:

  • You report it. They see the reported message, not the rest of your inbox.
  • Our spam checks flag it. They see the flagged message so they can decide whether it's spam or abuse.
  • The law or someone's safety requires it. For a valid legal request or a serious safety concern (such as a threat or a risk of self-harm), a small number of senior staff can open a specific message. Each time, they must give a reason and confirm their password, and the access is permanently logged.

After a review, staff may hide a message from your inbox or block its sender fingerprint across Cilbup. We keep a record of these decisions to keep the review process accountable.

Cookies & Tracking

We use cookies and similar technologies for:

  • Essential cookies: Required for the platform to function (authentication, security)
  • Preference cookies: Remember your settings and preferences
  • Analytics cookies: Help us understand how users interact with the platform
  • Campaign source cookie (cb_attr, 30 days): On your first visit we note how you found Cilbup: the campaign tags in the link (such as utm_source or ref), the website that sent you, and the page you landed on. When you sign up, this is stored with your account. When you send a message or a tip, only the campaign source (source, medium, campaign and ref) is stored with it, never your IP address or the page you came from, so senders stay anonymous. We use it only to see which channels bring people to Cilbup, and we don't share it with third parties.

You can control cookies through your browser settings, but disabling essential cookies may prevent you from using the Service.

Third-Party Services

Our Service uses the following third-party services:

  • Payment Partner: Payment processing
  • Google/GitHub: Social login authentication
  • Pusher: Real-time notifications

These services have their own privacy policies that govern their use of your data.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your country.

By using Cilbup, you consent to such transfers. We take steps to ensure your data remains protected in accordance with this policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new policy on this page
  • Updating the "Last Updated" date
  • Sending an email notification for material changes

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

  • Email: privacy@cilbup.site
  • Support Email: support@cilbup.site
  • Through the app: Account Settings → Help & Support

By using Cilbup, you acknowledge that you have read and understood this Privacy Policy.