Last updated: 21 August 2026
This is written to be read, not survived. If anything here is unclear, write to us and we will explain it plainly.
CelebIsland is operated by The Xoft Company ("we", "us"). We are the data controller for the information described here.
We are subject to the Nigeria Data Protection Act 2023 and the oversight of the Nigeria Data Protection Commission (NDPC).
What you give us. Name, username, email address, password (encrypted, never readable by us), date of birth, and anything you choose to add — photo, cover, bio, school, location, links.
What you create. Posts, comments, messages, photos, videos, audio, live broadcasts, pages, groups, events, listings, job applications.
What happens automatically. IP address, device and browser type, approximate location from your IP, pages visited, what you click, when you were last active.
Payments. Pro and Market payments are processed by Paystack. Card numbers go to Paystack, not to us. We keep a record that a payment happened, what for, and how much. We never see or store your card details.
Cookies. To keep you logged in, remember your settings, and understand which parts of the site people actually use.
The NDPA requires us to tell you not just what we do, but what legally entitles us to do it.
| What we do | Our lawful basis |
|---|---|
| Run your account, feed, messages, uploads | Contract — you asked us to provide the service |
| Take payments for Pro and Market orders | Contract, and legal obligation for financial records |
| Find spam, fake accounts, scams and abuse | Legitimate interest — keeping members safe |
| Study how the platform is used, to build better products | Legitimate interest, using grouped and de-identified data |
| Show advertising based on broad interests and location | Legitimate interest, and you can object at any time |
| Send you account, payment and security messages | Contract |
| Send you marketing messages | Consent — and you can withdraw it whenever you like |
| Respond to a lawful order from a court or regulator | Legal obligation |
About that fourth row, plainly. We study how CelebIsland is used — which features work, where people give up, what creators need — and we build products from what we learn. This is African data building African solutions, and it stays that way. We use grouped, de-identified information wherever we can, and we do not sell your personal data to anybody.
Nobody buys your personal data from us. We do not sell it. Full stop.
| What | How long |
|---|---|
| Your account and profile | While your account is open |
| Posts and content you delete | Removed on deletion; backup copies age out within 90 days |
| Your account after you delete it | Erased within 30 days, except records below |
| Payment and transaction records | 6 years, as Nigerian tax and company law requires |
| Moderation and safety records | 2 years after the account closes |
| Server and access logs | 12 months |
Some things happen automatically — spam filtering, ranking what appears in your feed, flagging suspicious signups. No automated system alone permanently closes an account. A person reviews that before it happens, and you can appeal to a person. You have the right not to be subject to a decision made purely by machine that significantly affects you.
If personal data is breached in a way that puts you at risk, we notify the NDPC within 72 hours of becoming aware, and we tell affected members directly and immediately.
Passwords are stored encrypted and never in readable form. Traffic is served over HTTPS. Admin access is restricted to named people. We do not hold card details at all.
Under the Nigeria Data Protection Act you can:
Write to privacy@celebisland.com. We respond within 30 days, free of charge.
You must be at least 16 to hold an account, and at least 18 to use Dating, the Wallet, or to buy Pro. If we learn an account belongs to someone younger, we close it and delete the data.
Our servers may sit outside Nigeria. Where data leaves the country, we require the receiving provider to protect it to the standard the NDPA demands.
If we change this policy in a way that matters, we will tell you here and on the platform before it takes effect.
