Privacy Policy

The data controller for CTRcheck is Mark AI Guy, located at an address to be published here shortly. Privacy questions and rights requests should be sent to support@ctrcheck.com.

• Identity and account data: name, email address, username, login/authentication information, and account status.
• Purchase data: product/course purchased, membership status, amount, date, payment reference, payment status, refund or dispute status.
• Learning data: enrolled courses, lessons viewed, completion status, progress, saved courses, cart items, ratings and reviews.
• Community data: posts, comments, questions, replies, profile information, and moderation records.
• Support data: messages, requests, complaint history, and attachments voluntarily submitted to support.
• Technical data: IP address, browser, device type, operating system, session identifiers, approximate location, login timestamps, security logs, and page interactions.
• Marketing preferences: consent or opt-out status for promotional communications.
• Payment data processed by providers: Paystack and financial institutions may process card, bank, identity, device, fraud-prevention, and transaction information necessary to complete and secure payment.

Data may be collected directly from you, automatically through your device/browser, from Paystack or another service provider, from authentication services, from community platforms you choose to join, and from security/fraud-prevention systems used to protect CTRcheck.

• Create, authenticate, and manage accounts.
• Provide purchased courses, membership, and community access.
• Process and verify transactions and refunds.
• Track learning progress and saved preferences.
• Operate carts, ratings, reviews, and community functions.
• Respond to support, privacy, and billing requests.
• Send transactional notices about purchases, access, security, policy changes, and service administration.
• Send marketing communications where permitted and, where required, based on consent.
• Detect fraud, account abuse, credential sharing, security threats, and payment disputes.
• Improve performance, reliability, content, and user experience.
• Keep financial, accounting, tax, security, and legal records.
• Establish, exercise, or defend legal claims and comply with lawful requests.

Depending on context and applicable law, CTRcheck may process personal data because processing is necessary to perform a contract with the user, comply with law, pursue legitimate interests that do not override user rights, protect vital interests where applicable, establish or defend legal claims, or because the user has provided valid consent. Consent can be withdrawn for future processing where consent is the applicable legal basis.

CTRcheck uses Paystack for payment processing. For payment processing performed on behalf of CTRcheck, CTRcheck acts as the merchant/data controller and Paystack may act as a data processor in accordance with its merchant agreement and data-processing terms. Paystack may also process information under its own legal obligations, including payment-network, anti-fraud, regulatory, tax, KYC/AML, and record-retention requirements. Users should review Paystack’s applicable privacy notices for its independent processing activities.

Where customers enter card or bank details directly into Paystack’s hosted or secure payment interface, CTRcheck does not intentionally receive or store the full raw card number, CVV, or equivalent authentication data. CTRcheck may receive payment references, limited payment-method metadata, transaction status, amount, and related information needed to manage the purchase.

CTRcheck may use cookies, local storage, or similar technologies for authentication, session security, cart persistence, preferences, analytics, performance, and fraud prevention. Strictly necessary technologies may operate without optional consent where permitted. Analytics, advertising, or other non-essential cookies should be subject to consent where applicable law requires it. See the Cookie Policy for more detail.

CTRcheck may share personal data with vendors that provide payment processing, hosting, database services, email delivery, authentication, analytics, cybersecurity, cloud storage, customer support, content delivery, communication tools, and professional services. Providers should receive only information reasonably necessary for their functions and should be subject to appropriate contractual or legal safeguards where required.

CTRcheck may disclose information to service providers; Paystack, banks, and payment networks; professional advisers; regulators or law-enforcement bodies in response to valid legal process; parties involved in investigating fraud or abuse; or a successor in a merger, financing, acquisition, restructuring, or sale of business assets. CTRcheck does not sell personal data for money.

Some infrastructure or service providers may process data outside Nigeria. Where cross-border transfers are subject to legal restrictions, CTRcheck uses appropriate safeguards and assesses applicable transfer requirements.

CTRcheck retains personal data only for as long as reasonably necessary for the purposes described in this policy, including providing ongoing access, maintaining course progress, supporting users, complying with financial/tax/accounting obligations, preventing fraud, resolving disputes, and establishing legal claims. Different categories may have different retention periods. Transaction records may need to be retained after account deletion where required by law or payment regulations.

You may request account deletion through support@ctrcheck.com. Deletion may remove access, course progress, preferences, and community profile data, subject to legal, security, fraud-prevention, backup, and financial-record retention requirements. Where information cannot immediately be deleted, we will explain why.

Subject to applicable law, you may have rights to information about processing, access your personal data, correct inaccurate data, request deletion, restrict or object to certain processing, withdraw consent, request data portability, and lodge a complaint with a competent supervisory authority. CTRcheck may verify identity before fulfilling a request and may refuse or limit a request where law permits or requires.

CTRcheck uses reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information, including access controls, secure authentication, encrypted network connections, least-privilege administrative access, monitoring, backups, secure development practices, and specialized payment processors. No internet service can guarantee absolute security.

CTRcheck maintains an internal incident-response process. If a breach involving personal data occurs, CTRcheck will assess risk, take reasonable containment and remediation steps, document the incident, and notify affected users and/or the competent authority where required by applicable law.

CTRcheck is intended for users 18 years of age or older. CTRcheck does not knowingly process children’s personal data in violation of applicable law. If CTRcheck learns that prohibited child data was collected, it will take appropriate steps to delete or lawfully regularize the processing.

CTRcheck may send promotional communications where permitted. Users can unsubscribe from marketing emails through the provided link or by contacting support. Transactional, security, purchase, policy, and account-administration messages may still be sent when necessary to provide the service.

CTRcheck may link to WhatsApp communities, AI tools, social networks, and external websites. Third parties process information under their own policies. CTRcheck is not responsible for unrelated third-party privacy practices after a user leaves CTRcheck or voluntarily interacts with those services.

CTRcheck may update this policy to reflect legal, technical, or operational changes. The page will show the new effective date. Material changes may be communicated by email or in-platform notice. Fresh consent will be collected where required.

Users should contact CTRcheck first at support@ctrcheck.com so concerns can be investigated. Where applicable, users may also complain to the Nigeria Data Protection Commission or another supervisory authority with jurisdiction.

Data controller: Mark AI Guy
Privacy email: support@ctrcheck.com
Business address: To be confirmed