In short: we collect what we need to connect creators with brands, run campaigns, power ShopLink stores and pay people. We don't sell your personal data. You can ask us to see, correct or delete your data at any time by emailing admin@useaktivate.com.
1. Who we are
Aktivate is a creator commerce platform operated by Aktivate Labs Limited ("Aktivate", "we", "us"). We connect creators with brands, businesses and agencies across Nigeria, Kenya, Ghana and South Africa.
This policy applies to useaktivate.com and our services, including the Aktivate dashboard (app.useaktivate.com), ShopLink and creator storefronts (shop.useaktivate.com), Aktivate Reports (reports.useaktivate.com), and our free tools such as the engagement rate calculator.
For the personal data described here, Aktivate is the data controller. Our contact address is 1, Akintola Ajiegbe Street, Lekki, Lagos, Nigeria, and you can reach us, including our data protection officer, at admin@useaktivate.com.
We process personal data in line with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Commission's General Application and Implementation Directive 2025. Where we serve people in Kenya, Ghana or South Africa, we also follow the Kenya Data Protection Act 2019, Ghana's Data Protection Act 2012 (Act 843) and South Africa's Protection of Personal Information Act 2013 (POPIA).
2. Who this policy covers
- Creators who sign up to join campaigns, open a ShopLink store or refer others.
- Businesses: brands, SMEs and agencies that post campaigns, list products or use Aktivate Reports, and the people who manage their accounts.
- Shoppers who buy from a creator's ShopLink store.
- Visitors to our websites, including people who use our free tools.
- People whose public social media content appears in a campaign report or engagement check.
3. What we collect
Information you give us
- Account details: name, email address, phone or WhatsApp number, password, country and city.
- Creator profile: social media handles, niche, bio, profile photo, audience details you share, and store name.
- Business details: company name, contact person, campaign briefs, budgets, product listings and prices.
- Payment and payout details: bank name, account name and account number so we can pay creators. Card payments are processed by our payment provider; we do not see or store full card numbers.
- Content you upload: campaign content, screenshots of post or story insights, and messages you send us.
- Verification information we may ask for to confirm a creator or business is genuine.
Information from shoppers
- Name, email address, phone number, delivery address and order details, so the brand can fulfil your order and we can send receipts and pay the creator.
Information collected automatically
- Device and browser type, IP address, approximate location, pages viewed, links clicked, and referring website.
- Cookies and similar technologies (see section 10).
- Store activity such as visits, clicks and sales, so creators and brands can see how their links perform.
Public social media information
- Publicly available profile and post information from platforms such as Instagram, TikTok and YouTube, including follower counts, likes, comments, shares, views, captions and public comments. We collect this through third-party data providers to verify creators, measure campaigns in Aktivate Reports, and power our engagement rate calculator. We only read information that is publicly visible; we never ask for your social media password.
Information from others
- Payment confirmations from our payment provider, and details from partners or people who refer you to Aktivate (for example, through our referral programme).
4. How we use it and why
We only use personal data where the law allows it. The table shows what we do and the lawful basis we rely on.
| What we do | Lawful basis |
|---|---|
| Create and run your account; match creators with campaigns; run ShopLink stores; process orders | Performance of our contract with you |
| Process payments, pay creators and keep financial records | Contract; legal obligation (tax and accounting laws) |
| Measure campaigns and produce reports for brands and agencies, including public post data | Contract with our business customers; our legitimate interests in providing accurate campaign reporting |
| Run the free engagement rate calculator using public profile data | Legitimate interests in offering a useful free tool |
| Prevent fraud, abuse and fake engagement; keep our services secure | Legitimate interests; legal obligation |
| Send service messages (receipts, payout updates, campaign updates) | Contract |
| Send newsletters, offers and community updates by email or WhatsApp | Consent, which you can withdraw at any time |
| Understand how our websites are used and improve them | Consent where required for analytics cookies; otherwise legitimate interests |
| Comply with the law, respond to lawful requests and enforce our terms | Legal obligation; legitimate interests |
AI-assisted features. In Aktivate Reports we use AI tools to help read numbers from insight screenshots and to group public comments by sentiment. A person reviews screenshot numbers before they appear in a report. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.
5. Who we share it with
We don't sell personal data. We share it only as needed to run our services:
- Between users of the platform: brands and agencies see the profiles, applications and content performance of creators who apply to or work on their campaigns; creators see the campaign details they need; brands receive shoppers' order and delivery details to fulfil orders.
- Service providers who process data on our behalf under contract, including hosting and databases, payment processing (Paystack), email delivery and email marketing, analytics (Google), advertising measurement on storefronts (Meta), public social media data collection, and AI processing.
- Clients of agencies: agencies using Aktivate Reports may share report links with their own clients.
- Authorities and advisers where required by law, court order or regulators, or to protect the rights, safety or property of Aktivate, our users or the public.
- A buyer or successor if Aktivate is involved in a merger, acquisition or sale of assets, under confidentiality and with this policy continuing to apply.
6. International transfers
Some of our service providers store or process data outside Nigeria, for example in the United States or the European Union. When we transfer personal data outside the country where it was collected, we do so only as permitted by the Nigeria Data Protection Act 2023 and other applicable laws, using appropriate safeguards such as contractual protections, or another lawful condition such as where the transfer is necessary to perform our contract with you.
7. How long we keep it
- Account data: for as long as your account is active, then deleted or anonymised within 24 months of closure unless we need it to resolve disputes, prevent fraud or meet legal duties.
- Payment, payout and order records: for at least six years, as required by tax and accounting laws.
- Campaign reports: for as long as the business account that created them is active, or until it deletes them.
- Engagement calculator: results are cached for up to 24 hours; the IP address used to apply daily limits is held only for the same day.
- Marketing contacts: until you unsubscribe or ask us to stop.
8. Security
We use reasonable technical and organisational measures to protect personal data, including encryption in transit, access controls, and limiting access to staff and providers who need it. No system is completely secure. If a personal data breach is likely to put your rights at risk, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and we will tell you without delay where the risk to you is high, along with steps you can take to protect yourself.
9. Your rights
Subject to the law, you have the right to:
- be told how we use your personal data, and get a copy of it;
- have inaccurate or incomplete data corrected;
- have your data deleted;
- restrict how we use your data;
- receive your data in a commonly used format and have it sent to another provider;
- object to processing based on our legitimate interests, and to direct marketing at any time;
- not be subject to decisions based solely on automated processing that significantly affect you;
- withdraw consent at any time, without affecting processing that took place before you withdrew it.
To use any of these rights, email admin@useaktivate.com. We may need to confirm your identity first. We will respond without undue delay and within the time the law requires. If you are a creator whose public content appears in a client's report, you can also contact us and we will work with that client on your request.
If you are unhappy with how we handled your data, please contact us first so we can try to put it right. You can also complain to the regulator: the Nigeria Data Protection Commission (ndpc.gov.ng), Kenya's Office of the Data Protection Commissioner, Ghana's Data Protection Commission, or South Africa's Information Regulator.
10. Cookies and analytics
- Essential: keep you signed in, keep your checkout working and remember settings such as your chosen currency.
- Analytics: we use Google Tag Manager and Google Analytics to understand how people use our websites.
- Advertising measurement: some creator storefronts use the Meta Pixel and Conversions API so brands can measure sales from their ads.
Analytics and marketing cookies are off until you allow them in our cookie banner. You can change your choice at any time from Cookie settings in the footer. We keep your choice for 12 months, then ask again.
You can block or delete cookies in your browser settings. Blocking essential cookies may stop parts of our services from working.
11. Children
Our services are for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
12. Other websites
Our services link to other websites and platforms, such as Instagram, TikTok and brands' own sites. Their privacy practices are their own, so please read their policies.
13. Changes to this policy
We may update this policy from time to time. We will change the date at the top, and if the changes are significant we will let you know by email or a notice on our services.
14. Contact us
Aktivate Labs Limited
1, Akintola Ajiegbe Street, Lekki, Lagos, Nigeria
Email (including our data protection officer): admin@useaktivate.com