Privacy Policy

SaltedSpace is operated by TECHJAM LABS Limited, a company incorporated in Lagos, Nigeria. We act as the data controller for personal data processed through the SaltedSpace platform.

Registered address: TECHJAM LABS Limited, Lagos, Nigeria
Legal contact: legal@saltedspace.com

If you are located in the European Economic Area (EEA) or the United Kingdom, the provisions in sections 8 (Legal Bases) and 10 (Your Rights) apply in addition to the rights described here.

We collect only the data necessary to operate and improve the platform.

Account data

• Name and display name
• Email address
• Password (stored as a one-way Argon2id hash — we cannot recover it)
• Profile photo (optional)
• Church affiliation (optional)
• Country and language preference

Usage data

• Pages visited and features used within the platform
• Post interactions: reactions, comments, saves, reshares
• Prayer requests submitted and prayers offered
• Session timestamps and approximate session duration

Communications

• Messages sent through our encrypted chat system (stored encrypted at rest)
• Posts, comments, and devotional entries you publish
• Prayer requests (which may optionally be anonymous)

Device and network data

• IP address (used for security and fraud prevention, not for advertising)
• Browser type and operating system
• Referring URL

Imported content

If you connect an external social media account (Facebook, Instagram, X, YouTube, or TikTok) to import your own posts, we access only the content you explicitly authorise through the respective platform's OAuth flow. We do not store your social media credentials.

We use your personal data for the following purposes:

• Service delivery: Creating and managing your account, displaying your content, enabling real-time chat, and processing prayer requests.
• Safety and moderation: Running content through our AI moderation pipeline to detect harmful material, and actioning moderation decisions.
• Personalisation: Showing you a relevant feed based on your connections and interests — without using behavioural advertising or external tracking.
• Platform communications: Sending notifications about activity on your account (reactions, replies, prayer responses), transactional emails (password reset, billing receipts), and product announcements (you can opt out of non-transactional emails at any time).
• Security: Detecting and preventing fraud, abuse, and unauthorised access.
• Analytics: Aggregated, anonymised statistics to understand platform health and guide product improvements.

We do not sell your personal data. We do not use your data to build advertising profiles. We do not share your data with third-party advertisers.

For users in the European Economic Area and the United Kingdom, we process your personal data under the following lawful bases:

• Contract (Art. 6(1)(b)): Processing necessary to perform the SaltedSpace service as described in our Terms of Service — account management, delivering content, enabling communications.
• Legitimate interests (Art. 6(1)(f)): Security monitoring, fraud prevention, aggregated analytics, and improving platform safety — provided those interests are not overridden by your rights.
• Consent (Art. 6(1)(a)): Optional analytics cookies and any non-essential email communications. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): Where we must comply with applicable law (e.g., retaining billing records).

For sensitive data (e.g., data revealing religious beliefs — inherent in a faith platform), we rely on your explicit consent (Art. 9(2)(a)) when you voluntarily share such information.

• Active accounts: Data is retained for as long as your account is active.
• Deleted accounts: When you delete your account, we permanently erase your personal data within 30 days, subject to the exceptions below.
• Content moderation logs: Retained for up to 12 months to maintain platform safety and allow appeals.
• Billing records: Retained for 7 years as required by applicable tax law.
• Security logs: IP addresses and access logs retained for 90 days.

Anonymous, aggregated usage statistics are retained indefinitely as they contain no personal data.

Depending on your location, you may have the following rights over your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your data (the "right to be forgotten") where no overriding legal basis applies.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests, including profiling.
• Right to restriction: Ask us to limit how we use your data while a complaint or request is being resolved.
• Right to withdraw consent: Where processing is based on consent, you may withdraw at any time without affecting prior processing.

To exercise any of these rights, email legal@saltedspace.com. We will respond within 30 days. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

We use a small number of trusted third-party providers to operate the platform. Each is bound by a Data Processing Agreement (DPA) and processes data only on our instruction:

• Payment processing: Stripe, Inc. — for subscription billing. Card details are processed directly by Stripe and never stored on SaltedSpace servers.
• Email delivery: A transactional email provider for password resets and notifications.
• Content delivery (CDN): A CDN provider for serving media and static assets globally.
• Error monitoring: An error-tracking service to capture application exceptions (personal data is scrubbed before transmission).

We do not use Google Analytics, Facebook Pixel, or any third-party advertising network.

SaltedSpace is a global platform. Your data may be processed on servers located outside your country of residence, including in Nigeria, the United States, or other countries where our infrastructure providers operate.

For transfers from the EEA or UK to third countries, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission (or the UK equivalent International Data Transfer Agreement) to ensure an adequate level of protection.

We use cookies and similar technologies to operate the platform. For full details, including how to manage your preferences, please read our Cookie Policy.

Essential cookies (authentication, CSRF protection) are always active. Analytics cookies are opt-in only.

SaltedSpace is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has registered an account, please contact us immediately at legal@saltedspace.com and we will delete the account promptly.

In compliance with the Children's Online Privacy Protection Act (COPPA) for users in the United States, we do not direct our service at children under 13, and we do not collect their data.

We apply industry-standard technical and organisational measures to protect your personal data, including:

• All data in transit encrypted via TLS 1.2+
• Passwords hashed using Argon2id with per-user salts
• Chat messages encrypted at rest
• Regular security reviews and penetration testing
• Access controls limiting staff access to personal data on a need-to-know basis

No system is completely secure. In the event of a data breach affecting your rights, we will notify you and relevant supervisory authorities as required by applicable law.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or a prominent notice within the platform at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

Your continued use of SaltedSpace after the effective date constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or complaints, contact us at:

TECHJAM LABS Limited
Lagos, Nigeria
legal@saltedspace.com