Privacy Policy

Information We Collect

We collect the following information when you use Spreadhit:

• Phone number for account creation and OTP verification
• Email address used for one-time password (OTP) login codes
• Display name you choose for your public profile
• Trading activity, positions, and transaction history
• KYC verification documents (government-issued ID) when required by law
• Device information and IP address for security and fraud prevention
• Referral code usage and referred-user relationships

How We Use Your Data

Your data is used to:

• Create and manage your account
• Send OTP verification codes to your email address
• Process M-Pesa deposits, withdrawals, and trades
• Display your profile, positions, and leaderboard rankings
• Calculate and distribute referral rewards and LP earnings
• Prevent fraud, account abuse, and market manipulation
• Comply with applicable legal and regulatory requirements
• Send important notifications about your account and markets

We never sell your personal information to third parties.

Data Security

We use industry-standard encryption to protect your data in transit and at rest. Access to personal data is restricted to authorized Spreadhit personnel only. OTP codes expire within a short window and are single-use. We store passwords as secure hashes and never in plain text.

Third-Party Services

We use the following third-party services to operate our platform:

• M-Pesa (Safaricom): For processing mobile money deposits and withdrawals. Your phone number and transaction amount are shared as required to process payments.
• Email service providers: Used to deliver OTP verification codes to your email address, solely for authentication purposes.
• Wallet infrastructure providers: Used for secure wallet management where applicable.
• Cloud hosting providers: For database storage and application infrastructure.

We only share the minimum information necessary for these services to function.

Data Retention

We retain your account data for as long as your account is active. Transaction records are kept for 7 years to comply with financial regulations. You may request deletion of your personal data at any time; note that transaction records required for regulatory compliance may be retained even after account deletion.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Withdraw consent for marketing communications
• Lodge a complaint with the relevant data protection authority

To exercise any of these rights, contact us at info@spreadhit.com.

Cookies

We use essential session cookies to keep you logged in and maintain your preferences. We do not use tracking, advertising, or analytics cookies.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of Spreadhit after changes take effect constitutes acceptance of the updated policy.

Contact Us

For privacy-related inquiries or to exercise your data rights, contact us at info@spreadhit.com