Privacy Policy & Data Protection

Last updated: January 2, 2025

1. Introduction

XtraCash ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform.

By using XtraCash, you consent to the data practices described in this policy. We comply with the Kenya Data Protection Act, 2019, and international data protection standards including GDPR principles where applicable.

2. Information We Collect

We collect the following types of information:

2.1 Personal Information

  • Email address
  • Phone number
  • Password (encrypted)

2.2 Transaction Data

  • Subscription package purchases
  • Task completion records
  • Earnings and withdrawal requests
  • Referral activities and commissions

2.3 Usage Data

  • IP address and device information
  • Browser type and version
  • Pages visited and time spent on the platform
3. How We Use Your Information

We use your information for the following purposes:

  • To create and manage your account
  • To process subscription purchases and payments
  • To credit earnings and process withdrawal requests
  • To track task completion and calculate commissions
  • To manage referral programs and credit referral bonuses
  • To communicate with you about your account and transactions
  • To provide customer support
  • To detect and prevent fraud and abuse
  • To improve our services and user experience
  • To comply with legal obligations
4. Data Storage and Security

We take data security seriously and implement industry-standard measures to protect your information:

4.1 Security Measures

  • Encryption of sensitive data in transit and at rest
  • Secure authentication using Firebase Authentication
  • Password hashing and protection
  • Regular security audits and updates
  • Access controls and authorization checks
  • Secure cloud storage with Google Cloud/Firebase

4.2 Data Retention

We retain your personal data only for as long as necessary to provide our services and comply with legal obligations. Transaction records are kept for accounting and legal compliance purposes.

5. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your data only in the following circumstances:

5.1 Service Providers

We share data with trusted service providers who help us operate the platform:

  • AWS for data storage and authentication
  • DTB for payment processing
  • IPN for notifications

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

5.2 Legal Requirements

We may disclose your information if required by law or to:

  • Comply with legal processes or government requests
  • Enforce our Terms and Conditions
  • Protect our rights, property, or safety
  • Prevent fraud or illegal activities
6. Your Data Protection Rights

Under the Kenya Data Protection Act, 2019, you have the following rights:

  • Right to Access: You can request a copy of the personal data we hold about you
  • Right to Rectification: You can request correction of inaccurate personal data
  • Right to Erasure: You can request deletion of your personal data (subject to legal obligations)
  • Right to Restrict Processing: You can request limitation on how we use your data
  • Right to Data Portability: You can request your data in a portable format
  • Right to Object: You can object to certain types of data processing
  • Right to Withdraw Consent: You can withdraw consent for data processing at any time

To exercise any of these rights, please contact us at info@antexventuresltd.net. We will respond to your request within 30 days.

7. Cookies and Tracking

We use cookies and similar tracking technologies to improve your experience on our platform. Cookies are small text files stored on your device that help us:

  • Remember your login status and preferences
  • Analyze platform usage and performance
  • Provide personalized content
  • Prevent fraud and enhance security

You can control cookie settings through your browser, but disabling cookies may affect platform functionality.

8. Children's Privacy

XtraCash is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we discover that we have inadvertently collected data from a minor, we will delete it immediately.

9. International Data Transfers

Your data may be stored and processed in servers located outside Kenya, including in data centers operated by Firebase/Google Cloud. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

10. Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and the relevant data protection authorities within 72 hours of becoming aware of the breach, as required by law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically.

Significant changes will be communicated via email or through a notice on the platform. Your continued use of XtraCash after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Email: info@antexventuresltd.net

Data Protection Officer: Available upon request

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya if you believe your data protection rights have been violated.

13. Consent

By using XtraCash, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.