Blowup9ja

Privacy Policy

What we collect, what we do with it, and how to get it removed. Plain English, because you should be able to read this.

Who we are

Blowup9ja is a social media growth service for Nigerian businesses, brands and creators. This policy covers blowup9ja.com and the customer dashboard behind it. It explains what we collect, why, who else sees it, and how to have it removed.

What we collect

Only what the service needs to run:

  • Account details — your email address, your name if you give one, and your password. Passwords are stored as a one-way hash, which means nobody here can read yours, including us.
  • Orders — the public profile or post link you submit, the service you chose, the quantity, and how the delivery progressed.
  • Payments — the amount, a reference and whether it succeeded. Your card or bank details are handled by Korapay and never reach our servers.
  • Technical information — your IP address, browser and device, used to keep accounts secure, apply rate limits and investigate fraud.
  • Email activity — whether a message was delivered, bounced, opened, or a link in it was clicked. Open and click tracking applies to service news and offers only, never to confirmation codes, password resets or receipts.

What we use it for

Running your account and your orders, taking payment, answering support messages, preventing fraud and abuse, meeting our accounting obligations, and — if you are a customer — sending occasional service news you can switch off at any time. We do not sell your personal information to anyone, for any price.

Who else sees it

A short list, and what each one gets:

  • Our delivery partner receives the public link, the service and the quantity, so the order can be fulfilled. It is not told who you are.
  • Korapay, our licensed Nigerian payment processor, handles the payment itself under its own privacy policy.
  • Our email provider is given your address and the message, so it can be delivered.
  • Meta and TikTok receive measurement data about adverts: your email address and name as an irreversible SHA-256 hash, an internal account reference, your IP address, browser, approximate city from that IP, and their own advertising cookies. This tells them an advert led to a signup or a payment. They are not given your password, your orders or your links.
  • Our hosting and database providers store the data so the service can run. It is held in the European Union (Frankfurt).

Cookies

One cookie keeps you signed in — without it the dashboard cannot work. Meta and TikTok set their own advertising cookies when you visit, used for the measurement described above. Blocking those in your browser does not affect your account or your orders.

Email you receive, and how to stop it

There are two kinds, and they are treated differently. Account email — your confirmation code, password resets, order updates and payment receipts — is part of the service and cannot be switched off while your account is open. Service news and offers go to customers only, and every one carries a one-click unsubscribe link; unsubscribing from those never stops the account email you need. We have never bought, rented or scraped an address list, and we do not send to anyone who has not created an account.

How long we keep it

Account and order records are kept while your account is open. If you close it, we delete your personal details but keep the minimum record of payments and orders that Nigerian accounting rules require. Email delivery logs are kept for a short period so we can diagnose problems with mail reaching you.

Your rights

Ask us and we will tell you what we hold about you, correct anything wrong, or delete your account and personal details. You can also object to the advertising measurement described above and we will exclude you from it. Write to us using the contact details below and we will reply within seven days.

Keeping it safe

Passwords are hashed, not stored. Card details are never ours to lose. Admin access is restricted per person and every administrative action is logged with who did it. Access to customer accounts by staff is limited to what their role needs, and two-factor authentication is available for staff accounts.

Changes to this policy

If we change how we handle your information we will update this page and change the date below. Material changes will also be sent to customers by email.

Contact us

Reach us about anything in this policy from your dashboard. We reply within seven days, usually the same one.

Last updated October 2026 · Terms of Service