Effective September 1, 2026
This Privacy Policy explains what information XOLDOUT ("XOLDOUT," "we," "us") collects through the XOLDOUT app and website (the "Service"), how we use it, and the choices you have. By using the Service you agree to the practices described here.
When you sign up, we collect your email address and, via Firebase Authentication, a unique account identifier. You choose a handle, display name, and optional bio, avatar, cover photo, tags, and social media links, all of which are visible on your public profile.
If you apply for a verification badge (Identity, Seller, Creator, Official, Business, or Fanbase), we collect additional information needed to review that application: legal name, date of birth, country and region, phone number, and — for identity or business verification — a government-issued ID and a selfie. This information is reviewed only by XOLDOUT moderators for the purpose of deciding your application and is not shown publicly or sold to anyone.
Music, artwork, merchandise photos, event listings, beats, social posts, Fanbase group messages, and anything else you upload or write is stored so the Service can display it to the audience you intend (public, your buyers, or a private Fanbase group).
Purchases and payouts are processed by Bachs, a third-party payment processor. XOLDOUT does not receive or store your full card number, bank login, or BVN — Bachs handles that directly. To pay creators out, we store the payout bank account details you add (bank name, account number, verified account name) so a withdrawal can be routed to the right place.
We collect basic technical information — IP address, browser/device type, and, if you enable them, push notification tokens — to keep the Service secure, diagnose problems, and deliver notifications you've opted into.
The Service uses browser local storage and similar technologies to keep you signed in and remember lightweight preferences. We don't use third-party advertising trackers.
We share information only where it's needed to run the Service:
We do not sell your personal information.
Depending on where you live — including under Nigeria's Data Protection Act 2023 — you may have the right to access, correct, or delete your personal information, and to object to certain processing. You can:
To make any other request about your personal information, contact us at support@xoldout.app.
We keep your account information for as long as your account is active, plus the 45-day recovery window after deletion. Verification documents are retained only as long as needed to support the badge they were submitted for and to resolve any dispute about it. Financial records related to sales, commissions, and payouts are kept as required for accounting and legal purposes.
The Service is not directed at children under 13, and buying or selling on XOLDOUT requires being old enough, under the law that applies to you, to enter into a binding contract. We don't knowingly collect personal information from children under 13.
We use industry-standard measures to protect your information, including encrypted connections and access controls on sensitive data like verification documents and payout details. No system is completely secure, and we can't guarantee absolute security.
Some of the providers we use — including Firebase/Google, Cloudflare, Bachs, and Resend — process data outside Nigeria. We take steps to make sure your information is protected wherever it's processed.
We may update this policy as the Service changes. If we make a material change, we'll update the effective date above and, where appropriate, notify you.
Questions about this policy or your data? Email us at support@xoldout.app.
See also our Terms of Service.