Your information, handled carefully.

MetaShield ("we", "us", "our") is an account recovery and protection service operating from Lagos, Nigeria. We help individuals and businesses recover, protect, and manage their social media and digital accounts. Our website is metashield.online.

For questions about this policy, contact our Data Protection Officer at [email protected].

We collect information you provide directly to us, including:

• Your name, email address, and phone number when you register or contact us • Account handles, platform names, and follower/audience details relevant to your case • Documents, screenshots, and identification you upload as evidence for a recovery case • Payment information (processed securely by Korapay — we do not store card details) • Messages, notes, and attachments sent through your client portal • IP address, browser type, and session data collected automatically when you use our site

We will never ask for your social media password, PIN, or two-factor authentication codes. If anyone claiming to represent MetaShield asks for your password, do not provide it and contact us immediately at [email protected].

We use the information we collect to:

• Assess your case and provide account recovery or protection services • Communicate with you about the status of your case and your account • Process payments for our services through Korapay • Send you security alerts, monthly reports, and service updates (where you have subscribed) • Comply with our legal obligations under Nigerian law • Improve our services and protect against fraud or misuse

We process your personal data on the following grounds under the Nigeria Data Protection Act 2023 (NDPA):

• Contract: processing is necessary to deliver the services you have requested • Legitimate interest: fraud prevention, security monitoring, and service improvement • Consent: for optional communications such as newsletters or tips (you can withdraw at any time) • Legal obligation: where Nigerian law requires us to retain or disclose information

We do not sell your personal information. We may share it only with:

• Trusted service providers operating on our behalf (Supabase for secure data storage, Korapay for payment processing, Resend for transactional email) — each under a data processing agreement • Our assigned agents and case handlers who need access to work your case • Law enforcement or regulatory authorities where required by Nigerian law • A successor entity if MetaShield is ever acquired or merged — you will be notified

Some of our service providers (Supabase, Resend) may store or process data outside Nigeria. Where this occurs, we ensure appropriate safeguards are in place consistent with the NDPA 2023 and the Nigeria Data Protection Regulation (NDPR).

We retain your personal information only for as long as necessary to deliver our services and fulfil legal obligations:

• Active account and case data: for the duration of your engagement with us plus 2 years • Payment records: 7 years (for financial and tax compliance under Nigerian law) • Security logs: 12 months

You may request earlier deletion — see section 10 below.

We take reasonable technical and organisational measures to protect your information, including encrypted storage, access controls, and secure connections (HTTPS). No system is completely secure; if you believe your account has been compromised, contact us immediately.

Under the NDPA 2023, you have the right to:

• Access — request a copy of the personal data we hold about you • Correction — ask us to correct inaccurate information • Deletion — ask us to delete your data (subject to legal retention requirements) • Portability — receive your data in a portable format • Objection — object to certain types of processing • Withdraw consent — at any time, for consent-based processing

To exercise any of these rights, email [email protected]. We will respond within 30 days.

We use only essential cookies required to operate the site and keep you signed in to your portal. We do not use tracking or advertising cookies. You can disable cookies in your browser settings, but this may affect how the portal works.

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated to registered clients by email.

For any privacy questions or to exercise your rights, contact us at [email protected].

If you are unsatisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.