Privacy
Policy

When you use SquiStack, we collect information you provide directly: your Telegram user ID and profile name, email address (if provided), Nigerian Bank Verification Number (BVN) and National Identity Number (NIN) for KYC verification, and linked bank account details for withdrawals.

We also collect information automatically: device type, IP address, usage logs, transaction history within the platform, and Telegram WebApp initialisation data to verify your identity.

We use your data to: create and maintain your SquiStack account; process deposits, yield distributions, and withdrawals; verify your identity as required by Nigerian financial regulations (NFIU/CBN guidelines); send you transaction confirmations and account alerts via Telegram; and improve our platform based on usage patterns.

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

Smile ID — receives your BVN/NIN data solely for identity verification. They are bound by their own privacy policy and Nigerian data protection obligations.

Paystack — receives your bank account details to process NGN deposits and withdrawals. Paystack is PCI-DSS compliant.

Privy — manages your embedded wallet. Your private keys are non-custodial and stored in Privy's secure enclave infrastructure.

We may disclose data when required by law, court order, or regulatory authority.

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Smart contract interactions are non-custodial — we never hold your private keys. Database access is restricted to authorised personnel with audit logging on all admin actions.

Despite these measures, no system is completely secure. We encourage you to use a strong Telegram account password and enable 2FA on your Telegram account.

We retain your account data for as long as your account is active. Transaction records are retained for 7 years as required by Nigerian AML regulations. KYC documents are retained for 5 years post-account closure.

You may request deletion of your account and personal data by contacting hello@SquiStack.app. Note that certain records may be retained as required by law.

Under the Nigeria Data Protection Act (NDPA) 2023, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data (subject to legal retention requirements); object to certain processing; and lodge a complaint with the Nigeria Data Protection Commission (NDPC).

SquiStack operates primarily as a Telegram WebApp and does not use cookies in the traditional sense. Our marketing website (SquiStack.app) uses minimal analytics to understand page performance — no cross-site tracking or advertising pixels.

We may update this Privacy Policy from time to time. We will notify you of material changes via a message in the SquiStack bot. Continued use of the platform after changes constitutes acceptance of the updated policy.