Privacy notice
This notice explains what Giveaways collects, why it is used, when it becomes public, and the choices available to you.
Jump to a section
1. Who is responsible
Giveaways is operated by Kemma Technologies in Accra, Ghana. For questions or data requests, email hello@kemmatechnologies.com. A promotion host is separately responsible for how they use entrant information to administer and fulfil their prize.
2. Information we collect
- Accounts: verified email, chosen public name, authentication identifiers, public X profile metadata, saved drafts, promotion settings, subscription and billing references.
- Social entries: stable X account identifier, handle, avatar URL, supported-condition results, encrypted OAuth access and refresh tokens, granted scopes, expiry times, entry time, and entry serial.
- Native item and free web entries: the chosen public name and email snapshot, condition and consent records, entry time, and entry serial.
- Operations and security: request and error logs, device and browser details, cookies, approximate location derived from network data, IP-derived rate-limit identifiers, abuse signals, and support messages.
3. How we use information
We use information to authenticate users; save and publish giveaways; check entry conditions; prevent duplicate, automated, or abusive activity; seal entry lists; run and verify draws; contact potential winners; process payments; provide support; diagnose failures; secure the service; and meet legal obligations.
4. What is public
A social entrant's public X handle and avatar, or a free entrant's chosen display name, may appear with an entry serial and verification state. Published giveaway terms, commitments, entrant-list evidence, draw inputs, candidate eligibility decisions, potential winners, ordered backups, and audit events may form a lasting public record. Email addresses, OAuth tokens, full IP addresses, and billing details are not published.
5. Service providers and disclosure
We disclose only what is reasonably needed to operate the service, including to:
- For native item giveaways, the owning host receives only the selected winner’s name and verified email to arrange pickup or delivery. Other entrants’ contact details are not shared with the host.
- Supabase for authentication, database, photo storage, and realtime infrastructure;
- Vercel for hosting and request processing;
- X for account authentication and supported-condition checks;
- Cloudflare Turnstile and Upstash for abuse prevention and rate limiting;
- Sentry for error monitoring; and
- Lemon Squeezy for checkout, billing, and subscription administration.
We may also disclose information when required by law, to protect users or the service, in a business transfer, or with your direction. These providers may process information outside Ghana under their own safeguards and terms.
6. Retention
We keep account, entry, security, and transaction information only as long as reasonably needed for the purposes above, disputes, fraud prevention, and legal obligations. Public fairness and audit records are designed to remain available so a completed or void draw can continue to be verified. Encrypted provider tokens and other operational records may be retained while needed to verify entries or investigate a draw; we do not promise an automatic deletion date that the product does not yet enforce. Native entry contact snapshots may remain after account deletion where needed for the prize handoff or a dispute; they stay private. Contact us to request review of retained details.
8. Your choices and rights
Depending on the law that applies to you, you may ask to access, correct, export, object to, restrict, or delete personal information. Hosts can use account settings and export tools where available. Email us for anything else. We may need to verify your identity, and some requests can be limited where preserving a public draw record, preventing fraud, resolving a dispute, or complying with law requires retention.
9. Children, security, and changes
Giveaways is not intended for children under 13. Hosts may set a higher minimum age. We use access controls, encryption for provider tokens, and other safeguards, but no online system can guarantee absolute security. We may update this notice as the product changes; the effective date above will show the latest published version.