Legal
Privacy Policy
How we collect, use, and protect your personal data.
Last updated: August 2026
These terms govern your use of Neroo, a community monetisation platform operated by Rivertech Solutions Ltd, a company registered in Nigeria. If you have questions, contact us at [email protected].
1Who We Are
Neroo is a community monetisation platform operated by Rivertech Solutions Ltd, a company registered in Nigeria. We help community owners on Telegram and WhatsApp charge members for access, and we facilitate automatic payouts. References to "Neroo", "we", "our", or "us" in this policy refer to Rivertech Solutions Ltd.
2Information We Collect
We collect information in the following ways:
From Community Owners
- Telegram user ID and, where provided, your Telegram-verified phone number — used solely to identify your account and link it across platforms (Telegram, WhatsApp, and the Neroo mobile app)
- WhatsApp account phone number, where you connect a WhatsApp group
- Group name, description, and payment settings you configure
- For campaigns: event date, capacity, refund policy text, and an optional cover image you upload
- Bank account details for payouts (account number, bank name, and account name) — stored on our servers and shared with Paystack solely to process your payouts
- Identity documents submitted for KYC verification (NIN, BVN, Ghana Card, Kenya National ID) — processed by Dojah
- Transaction history: amounts charged, members paid, payouts made
From Members
- Name and email address provided at payment
- Phone number (for WhatsApp flows)
- Payment method details processed directly by Paystack; we do not store card numbers
- Payment confirmation and invite link generation logs
Automatically Collected
- IP address and approximate location at time of payment
- Device and browser type when accessing the dashboard or payment pages
- Bot interaction logs (commands sent, timestamps)
3Public Listings (Discover)
If you choose to list a campaign or group publicly on our Discover page, its name, description, cover image, price, and (for campaigns) event date become visible to anyone who visits Discover, including people who do not have a Neroo account. Public listing is off by default — you choose it explicitly when creating or editing a campaign or group, and can turn it off at any time.
4How We Use Your Information
- To create and manage your paid community groups
- To process payments and generate single-use invite links for members
- To calculate and disburse payouts to community owners (90% of each payment)
- To verify your identity for KYC compliance, where required by Nigerian financial regulations
- To provide you with your dashboard, analytics, and payout history
- To send transactional messages (payment confirmations, payout notifications, magic links) via Telegram or WhatsApp
- To detect and prevent fraud, abuse, and unauthorised access
- To comply with legal obligations in Nigeria and other jurisdictions where we operate
- We use only the details you have provided, and only for the purposes described above. We do not use your data for advertising, profiling, or any purpose unrelated to operating and securing your Neroo account.
5Third-Party Services We Share Data With
We share data only with trusted service providers necessary to operate Neroo:
Paystack (Stripe Payments Africa)
Payment processing for member subscriptions and owner payouts. Paystack stores payment method details. Their privacy policy applies to data they collect.
Dojah
Identity verification (KYC) for owners whose monthly revenue exceeds Nigerian regulatory thresholds. KYC data is processed and stored by Dojah under their own data retention policies.
Telegram / WhatsApp
We interact with users through the Telegram Bot API and WhatsApp Business API. Your use of those platforms is subject to Telegram's and Meta's respective privacy policies.
Cloudflare R2
Storage for campaign cover images uploaded by community owners. An uploaded image is served publicly at a stable URL, since it appears on the campaign's payment page.
Hostinger / VPS infrastructure
Our server and database infrastructure. All data at rest is stored on servers we control.
We do not sell your personal data to any third party.
6KYC Data & Financial Compliance
In compliance with Central Bank of Nigeria (CBN) guidelines, we collect identity information from community owners based on monthly transaction volume:
- Under ₦50,000/month: No identity verification required
- ₦50,000 – ₦500,000/month: NIN (National Identification Number)
- Above ₦500,000/month: NIN + BVN (Bank Verification Number)
Equivalent tier requirements apply in Ghana, Kenya, and South Africa using local ID documents. KYC data is encrypted in transit and at rest, and is only shared with Dojah for verification purposes.
7Data Retention
We retain your data for as long as your account is active or as required by law:
- Transaction records and payout logs are retained for a minimum of 7 years in line with Nigerian financial record-keeping requirements
- KYC documents are retained for 5 years after account closure
- Bot interaction logs are retained for 12 months
- Dashboard and account data is deleted within 90 days of a verified account closure request
8Your Rights
Under the Nigeria Data Protection Act (NDPA) 2023 and applicable laws in other jurisdictions, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request deletion of your data (subject to legal retention obligations)
- Portability — receive your data in a machine-readable format
- Objection — object to processing of your data for direct marketing
- Withdrawal of consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
9Cookies & Tracking
The Neroo dashboard uses minimal session cookies necessary to keep you logged in via your magic link token. We do not use third-party advertising cookies or tracking pixels.
Payment pages (app.neroobot.com/join/:yourgroup) may load Paystack's inline script, which operates under Paystack's own cookie policy.
10Security
We use HTTPS/TLS for all data in transit. Passwords are not used in our system — authentication is done via single-use magic links. Database access is restricted to our internal services and is not publicly exposed. KYC documents are encrypted at rest. Despite these measures, no system is completely immune to breaches. We will notify affected users within 72 hours of becoming aware of a significant data breach.
Your Account Security Responsibilities
You are responsible for maintaining the security of the Telegram and WhatsApp accounts you use to access Neroo. Your dashboard link contains a personal access token — treat it like a password and do not share it with others.
- Never share your Neroo dashboard link, magic links, or Telegram bot session with anyone else
- Neroo will never ask you for your Telegram or WhatsApp verification code, your bank PIN, or your BVN via the bot or any other channel
- If you believe your account has been accessed without your authorisation, contact us immediately at [email protected]
11Children's Privacy
Neroo is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data, we will delete it promptly. Community owners are responsible for ensuring their groups comply with age restrictions appropriate to their content.
12Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page and, where the changes are significant, notify active owners via their registered Telegram or WhatsApp account. Your continued use of Neroo after any changes constitutes acceptance of the updated policy.
13Contact Us
For privacy-related enquiries:
Rivertech Solutions Ltd
Email: [email protected]
Support: [email protected]