Rooli Privacy Policy
Effective Date: November, 2025
This Privacy Policy explains how Cresthub Media (Reg: 1913610), the owner and operator of the Rooli AI-powered social media scheduling Service (the "Service" or "Rooli"), collects, uses, protects, and discloses Personal Data from its Users.
We are committed to processing Personal Data in compliance with the Nigeria Data Protection Act (NDPA) 2023 and other applicable laws. Cresthub Media acts as the Data Controller concerning the data collected directly from our Users.
1. Definitions
Personal Data:
Any information relating directly or indirectly to an identified or identifiable natural person (Data Subject).
Data Controller:
Cresthub Media, the entity that determines the purposes and means of processing Personal Data.
Data Subject:
The identified or identifiable natural person to whom the Personal Data relates (i.e., you, the User).
Processing:
Any operation performed on Personal Data (e.g., collection, storage, use, disclosure).
2. Personal Data We Collect
We collect and process the following categories of Personal Data:
| Data Category | Examples of Data Collected | Purpose of Processing (Lawful Basis) |
|---|---|---|
| A. Account Data | Name, Email Address, Phone Number, Company Name, Job Title. | Contractual necessity (To provide the Service and manage the User account). |
| B. Financial Data | Billing address, payment card details (securely transmitted to our payment processor, not stored by us). | Contractual necessity (To process subscription payments). |
| C. Authentication Data | API Tokens / OAuth Credentials for LinkedIn, X, Facebook, Instagram. | Consent and Contractual necessity (To connect and manage the User's social media accounts as instructed). |
| D. Service Usage Data | IP address, browser type, operating system, pages visited, time spent, scheduling frequency. | Legitimate interest (To maintain, secure, and improve the performance and user experience of Rooli). |
| E. Content Data | The text, images, videos, and media files scheduled by the User (but not directly posted by us). | Contractual necessity (To execute the core function of the Rooli scheduler). |
3. How We Use Your Personal Data
We process your Personal Data on the basis of your Consent and Contractual Necessity for the following purposes:
- •To Provide and Maintain the Service: To operate Rooli, manage your subscription, and execute your scheduled posts on third-party platforms.
- •To Process Transactions: To manage payments, billing, and invoices related to your Subscription Plan.
- •To Communicate with You: To send service-related notices, security alerts, and customer support responses.
- •For Security and Fraud Prevention: To protect Rooli and our Users from malicious activity.
- •For Service Improvement: To monitor usage trends, diagnose technical problems, and enhance our AI and scheduling features (using aggregated or anonymized data where possible).
4. Disclosure and Sharing of Personal Data
We only share Personal Data when necessary to provide the Service or when legally required.
4.1 Third-Party Social Media Platforms
When you connect your accounts (LinkedIn, X, Facebook, Instagram), you explicitly authorize Rooli to share only the necessary credentials (via secure tokens) and your User Content (E) with these platforms to enable posting on your behalf. We do not control the privacy practices of these third parties. Your use of Rooli is subject to their respective privacy policies.
4.2 Service Providers
We engage third-party companies and individuals to facilitate our Service ("Data Processors"). These include:
- Payment Processors: To handle subscription fees securely.
- Hosting Providers: To store the Service data.
- Analytics Providers: To monitor and analyze Service use.
These Data Processors are bound by written contractual obligations to implement appropriate data security measures and use your Personal Data only for the purposes directed by Cresthub Media.
4.3 Legal Requirements
Cresthub Media may disclose your Personal Data in the good faith belief that such action is necessary to:
- Comply with a legal obligation (e.g., Nigerian court order or subpoena).
- Protect and defend the rights or property of Cresthub Media.
- Prevent or investigate possible wrongdoing in connection with the Service.
- Protect the personal safety of Users or the public.
5. Cross-Border Data Transfer
As a Nigeria-registered entity, we primarily operate in Nigeria. However, to provide the Service, your Personal Data may be transferred to, and maintained on, computers located outside of Nigeria.
We will take all necessary steps to ensure that your data is treated securely and that the transfer is only performed to jurisdictions that provide an adequate level of protection in line with the NDPA 2023, or where appropriate safeguards (such as standard contractual clauses) are implemented.
6. Data Security
We employ robust technical and organizational measures to protect your Personal Data from unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include data encryption, secure data transmission (SSL / TLS), access controls, and regular vulnerability testing.
7. Data Retention
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, typically for the duration of your active subscription and a reasonable period thereafter to comply with our legal obligations. Authentication Data (C) is immediately deleted upon account disconnection or closure.
8. Your Data Subject Rights (NDPA 2023)
As a Data Subject under Nigerian law, you possess the following rights regarding your Personal Data:
- •Right to be Informed: The right to be informed about the use of your Personal Data (as detailed in this Policy).
- •Right of Access: The right to request and receive a copy of your Personal Data we hold.
- •Right to Rectification: The right to request correction of inaccurate or incomplete Personal Data.
- •Right to Object: The right to object to the processing of your Personal Data.
- •Right to Restriction of Processing: The right to request the suspension of processing under certain conditions.
- •Right to Data Portability: The right to receive your Personal Data in a structured, commonly used format.
- •Right to Erasure ("Right to be Forgotten"): The right to request the deletion of your Personal Data, subject to legal and contractual exceptions.
- •Right to Withdraw Consent: The right to withdraw your consent at any time where consent is the lawful basis for processing.
To exercise any of these rights, please contact us using the details in Section 10.
9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date." We will notify you via email or a prominent notice on the Service, prior to the change becoming effective.
10. Contact Information
If you have any questions about this Privacy Policy, the practices of the Service, or wish to exercise your data subject rights, please contact us:
Email:
Rooli[at]cresthub.com
(Please title your email: "Privacy Policy Inquiry")
Company Name:
Cresthub Media
Company Address:
RAYFIELD, JOS, PLATEAU STATE, NIGERIA