Privacy Policy

This notice explains how we collect, use, and protect personal data.

Last updated: 15 July 2026

NaijaGoodNews Media Ltd (“we”, “us”) publishes https://naijagoodnews.vercel.app and related apps under the brand NaijaGoodNews. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and applicable laws in jurisdictions where we serve readers.

1. Data controller & processors

Controller: NaijaGoodNews Media Ltd. Privacy / DPO: privacy@naijagoodnews.com. Full imprint: Imprint. Exercise rights via data subject rights.

Platform provider: Bacenik Nig Ltd (subsidiary of Bacenik LLC) hosts the CMS, website, and apps as a technology processor — not the publisher of the journalism.

Key processors (categories):

Supabase — database, auth, and storage for newsroom and reader forms
Vercel — application hosting and edge delivery
Stripe — membership payments and billing portal (when enabled)
Upstash — rate limiting and view counters
Resend — transactional email (billing links, invites) when configured
Sentry — error monitoring for reliability (operational/security)
Plausible / Vercel Analytics — optional analytics only after cookie consent
YouTube / Cloudinary — media embeds or media hosting when used

2. Data we process

Newsroom staff accounts (name, email, role)
Newsletter emails, consent timestamps, and unsubscribe timestamps
Membership emails, billing status, and Stripe customer/subscription IDs
Tip submissions and complaint / DSAR / copyright notices
Technical logs (IP, user agent) for security and rate limiting
Optional analytics cookies if you accept them

3. Purposes & lawful bases

Journalism and site operation (legitimate interests / public interest journalism), newsletters and memberships (consent and/or contract), legal requests and NDPA rights (legal obligation), security and abuse prevention (legitimate interests), and analytics only with consent where required.

4. Cookies & embeds

Essential cookies keep sessions secure. Analytics load only after “Accept all”. Third-party video embeds (YouTube) load only after consent or after you choose “Load video”. See our Cookie Policy. Manage preferences from the banner or by clearing site data.

5. Your rights (NDPA)

You may request access, correction, erasure, restriction, portability, or object to certain processing. Use our data rights form or email privacy@naijagoodnews.com. We aim to respond within 30 days after we verify identity. You may lodge a complaint with the Nigeria Data Protection Commission (NDPC).

6. Retention schedule

Record	Retention
Newsletter subscriptions	Until unsubscribe + up to 24 months for suppression proof
Membership / Stripe	Active subscription + 7 years for tax/financial records
Tips / complaints / copyright / DSAR	Up to 3 years after closure (longer if litigation)
Staff accounts	While employed/contracted + 1 year
Security / rate-limit logs	Typically 90 days (or vendor default)

We use encryption in transit, role-based access, and vendor diligence. Personal-data breaches posing risk are notified to the NDPC and affected persons as required (including NDPA 72-hour duties where applicable).

7. International transfers

Processors may store data outside Nigeria. We use contractual controls and select vendors with appropriate security commitments.

8. Children & vulnerable subjects

NaijaGoodNews is a general-audience news service. We do not knowingly collect children’s data for marketing. Journalism involving minors follows our Editorial Standards (consent, anonymisation, and public-interest balancing).

9. Changes

We will update this page when practices change and adjust the “Last updated” date.