Security

How we protect your data

• Encryption in transit. The app and our websites talk to our servers only over HTTPS.
• Passwords are never stored readable. We keep a one-way hash. Nobody at Adbox can see your password.
• Private files stay private. Photos in chats and data downloads are kept in private storage and reached through links that expire.
• Short-lived sign-ins. Access tokens expire after two hours and are refreshed automatically; a stolen token soon stops working.
• New sign-in alerts. We tell you when your account is used on a new device and let you secure it in one tap.
• Limited access. Only staff who need it for their job can reach personal data.
• Payments by Paystack. Card and Mobile Money details go to Paystack, not to us.

What you can do

• Use a unique password, and verify your email so you can recover your account.
• Link a second sign-in method in Settings › Account › Connected accounts.
• Never share a verification code. Adbox staff will never ask for it.
• Keep your phone’s software and the Adbox app up to date.

If something goes wrong

If a security incident puts your personal data at risk, we will tell you without undue delay, explain what happened and what to do, and notify the Data Protection Commission and, where required under the Cybersecurity Act, 2020 (Act 1038), the Cyber Security Authority.

Reporting a vulnerability

If you believe you have found a security problem in Adbox, please email [SECURITY EMAIL]. Include:

1. what you found and where;
2. steps to reproduce it;
3. what an attacker could do with it.

We will acknowledge your report within 3 working days and keep you updated. Please:

• give us a reasonable time to fix it before telling anyone else;
• only use accounts you own, and never access, change or delete other people’s data;
• not run tests that degrade Adbox for others (no denial of service, spam or social engineering of staff).

We will not take legal action against anyone who reports in good faith and follows these rules, and we are glad to credit you in Credits.