Privacy Policy

Last updated: October 7, 2026

1. Who We Are and When This Policy Applies

EASTSTAR SOFTWARE DEVELOPMENT LTD ("Toplane Go", "we", "us", or "our"), based in Abuja, Federal Capital Territory, Federal Republic of Nigeria, operates the Toplane Go website, creator marketplace, accounts, and campaign collaboration tools. This Policy describes how we handle personal data when you visit or use those services, contact us, or interact with a Toplane Go profile or campaign.

Toplane Go is responsible for deciding why and how personal data is used for the services described here. The main law we address in this Policy is the Nigeria Data Protection Act 2023 (NDP Act). Other privacy laws may also apply depending on where you live or use Toplane Go. Where a law gives you additional rights, this Policy does not take them away.

2. Personal Data We Handle

The information we handle depends on whether you browse, register, publish a profile, request verification, use a campaign workspace, or buy a Toplane Go plan. It may include:

Category	Examples	How it reaches us
Account and sign-in	Name, email address, account role and status, password hash, email-verification status, and session information.	You provide it when you register, sign in, or update your account.
Creator profiles	Display name, profile image, biography, country, city, languages, categories, platform handles and links, creator-entered audience information and metrics, rates, service packages, portfolio items, and availability.	You provide and manage the profile information and choose what to publish.
Business profiles	Business or company name, contact name and email, website or public link, industry, country, city, and logo.	You provide it when creating or updating a business profile.
Campaign and workspace activity	Campaign requests and counteroffers; agreed price, currency, deadline, deliverables, revisions, usage rights and related terms; workspace messages and attachments; deliverable links or files; status updates; reviews; reports; and support messages.	You and the other participants create this information while using the marketplace and Deal Workspace.
Verification information	For creator verification, social media account links, screenshots or audience evidence you submit, optional notes, review status, and badge information. Creator verification does not request government-issued ID.	You provide it when you request creator verification. We use it to review and administer the social account ownership request.
Toplane Go billing records	Plan, billing cycle, amount, currency, payment reference and status, renewal information, and provider identifiers.	Created when you start or use a paid Toplane Go plan. The checkout provider processes the payment details needed to complete checkout.
Cookies and optional usage analytics	Cookie choices, saved preferences, and—if you enable analytics—marketplace events such as searches, profile views, saved creators, requests, deals, and reviews.	Stored in your browser or generated when you use a feature, according to your cookie choices.

Please do not include sensitive personal information in a public profile or campaign workspace unless it is needed for the collaboration and you are authorized to share it.

3. Why We Use Personal Data

We use personal data to:

create and secure accounts, verify email addresses, authenticate users, and provide account features;
publish creator and business profiles, show creator search results, and let businesses and creators find and contact one another;
send and manage campaign requests, counteroffers, agreements, workspace messages, deliverables, revisions, reviews, and reports;
review verification requests, investigate reports, prevent abuse, protect the Platform, and respond to support requests;
start and administer subscriptions, confirm payments, provide paid features, manage renewals, and keep transaction records;
measure marketplace use through optional analytics when you have enabled that category; and
meet legal obligations, respond to lawful requests, establish or defend legal claims, and protect users’ rights and safety.

Depending on the purpose and applicable law, our lawful basis may include providing a service you requested or performing a contract, your consent, our legitimate interests in operating and securing the Platform, or a legal obligation. We use consent for optional browser analytics. You can change that choice through the Cookie Policy controls. Withdrawing consent does not affect processing that already took place or processing that has another lawful basis.

4. What Other Users Can See

Creator profile and portfolio information you publish may appear in public search results and profile pages. Businesses can see published creator details to assess a potential collaboration. Business profile information may be shown where needed to identify the business sending a campaign request.

The creator and business participating in a campaign can see information, terms, messages, attachments, and deliverables shared in that Deal Workspace. Only share information with a campaign counterparty that you are comfortable sharing for that collaboration. A user may copy or retain information they received, subject to their own legal obligations and agreement with you.

5. When We Share Personal Data

We do not sell personal data or use third-party advertising cookies. We share information only as needed for the purposes described in this Policy, including with:

Other users: public profile information and the campaign information shared with participants, as explained above.
Service providers: providers that host or operate parts of the Platform, store data, send account and security emails, process Toplane Go subscription checkout (including Bachs), or help protect and maintain the service. They process information to provide services to us and under the privacy and security requirements that apply to them and our use of their services.
Professional advisers and authorities: where necessary to obtain advice, comply with law or a valid legal request, protect safety or rights, or establish or defend a legal claim.
Business transfers: if Toplane Go is involved in a merger, financing, reorganization, or sale, information may be transferred as part of that event subject to appropriate protections and applicable law.

Toplane Go subscriptions are separate from campaign compensation. Creators and businesses arrange campaign payments directly with one another; Toplane Go does not receive or hold those campaign funds.

6. Storage and International Transfers

Toplane Go and its service providers may store or access information in a country different from the country where you live. Privacy rules may differ between countries. When personal data is transferred across borders, we will use a transfer basis and safeguards permitted by applicable law. You may contact us to ask about the categories of recipients or safeguards relevant to a transfer.

7. Cookies and Browser Storage

Toplane Go uses strictly necessary storage for features such as sign-in and remembering your cookie choice. Optional preference and analytics storage are off unless you enable them. If analytics is enabled, related marketplace events may be associated with your account. You can review the storage items, change your choices, or reject optional storage on our Cookie Policy page. Disabling necessary storage can prevent sign-in or private workspace features from working.

8. How Long We Keep Information

We keep personal data for as long as needed for the purpose it was collected, to provide the service, to meet legal or accounting obligations, to protect the Platform, or to resolve a dispute. Retention periods depend on the information and circumstances; we do not apply one fixed period to every type of data.

When an account closes, we may retain limited account, campaign, transaction, verification, report, and consent records where needed for legal obligations, security, accounting, or disputes. Removing your account or profile cannot remove information that another user has independently received or retained, or records we are legally permitted or required to keep. Where information is no longer needed, we will delete it or take steps to de-identify it, subject to technical backups and applicable law.

9. Security

We use safeguards designed to protect personal data against unauthorized access, loss, misuse, or alteration. For example, account passwords are stored as password hashes rather than readable passwords, and the sign-in cookie is HTTP-only, uses a SameSite=Lax setting, expires after seven days, and is marked Secure in production. No online service can guarantee that every transmission or stored record will always be secure. We handle suspected personal data incidents and any required notices under applicable law.

10. Your Privacy Rights

Depending on the law that applies to you, you may have the right to be informed about processing, request access to your personal data, correct inaccurate or incomplete information, request erasure or restriction, object to certain processing, receive or transfer certain information, withdraw consent where processing relies on consent, and raise a complaint with a supervisory authority. The Nigeria Data Protection Act 2023 provides data-subject rights, subject to the conditions and exceptions in that Act.

To make a privacy request, email hi@toplanego.com with the subject "Privacy Request". Tell us the email address used for your Toplane Go account, the right you want to exercise, and enough detail for us to locate the information. We may ask for reasonable information to verify your identity or clarify the request. Do not send your password or one-time verification code. We aim to respond within 30 days after receiving a complete, verified request and any information reasonably needed to process it. The law may permit more time or limit a request in some circumstances.

You may also complain to the Nigeria Data Protection Commission (NDPC) through its official website, or contact the data-protection regulator in your country where local law provides for one.

11. Children

Toplane Go is intended for people who are at least 18 years old. The registration flow does not routinely verify age. If you believe a person under 18 has created an account or provided personal data, contact us at hi@toplanego.com so we can review the report and take steps required by applicable law.

12. Changes and Contact

We may update this Policy when our practices or legal requirements change. We will update the date at the top of the page when we publish a revision. If a change materially affects how we handle personal data, we will provide any notice required by applicable law.

Privacy questions and requests:
EASTSTAR SOFTWARE DEVELOPMENT LTD
hi@toplanego.com
Abuja, FCT, Federal Republic of Nigeria