Privacy Policy

Last updated: 3 October 2026

1. Who we are

Castvoo is run by Zedapex in Nigeria.

Castvoo (https://castvoo.com) is a Telegram broadcast and auto follow-up tool operated by Zedapex, Lagos, Nigeria ("we", "us" or "our"). This policy explains what personal data we collect, why we use it, who we share it with, how long we keep it and what rights you have.

We follow the Nigeria Data Protection Act 2023 ("NDPA"). If you are in the European Union or the United Kingdom, we also honour your rights under the General Data Protection Regulation ("GDPR") and the UK GDPR.

2. Our two roles: controller and processor

For your account we decide how data is used. For your subscribers, you decide.

• We are the controller of the data about you as a Castvoo customer: your account details, payment records, support chats and how you use our website and dashboard.
• You are the controller, and we are the processor, of the data about your subscribers, meaning the people who start your bots or are members of your connected channels and groups. We handle that data only to provide Castvoo to you and only on your instructions.

If you are a subscriber of a business that uses Castvoo and want to ask about your data, please contact that business first. They decide how your data is used. If you cannot reach them, write to [email protected] and we will help where we can.

3. What we collect

Only what we need to run the service.

• Account details: your name, email address, Telegram ID and country.
• Workspace content: messages, follow-up sequences, audiences, media you upload, settings and the bots, channels and groups you connect. Bot tokens are stored encrypted.
• Subscriber data your bots receive from Telegram: Telegram user ID, first name, username, language, the start tag they used, and their join and click history.
• Payment records: top-ups, plan payments, receipts and the payment method used. We never receive or store full card numbers. For crypto top-ups, we keep the coin, amount and transaction ID.
• Referral records: who signed up through your referral link, your earnings and, if you withdraw, the crypto address you give us.
• Support chats: messages you send to our team inside the dashboard and emails you send us.
• Notes for Cas: the information you write on the Train Cas page, and the questions and text you give Cas.
• Technical data: when you use our website and dashboard, our hosting provider processes basic technical information such as your IP address and browser type, so pages load and the service stays secure. We also keep an audit log of staff actions.

4. How we use your data

To run Castvoo, keep it safe and talk to you about your account.

• To create and run your account and workspace.
• To send your messages and follow-ups to your subscribers through Telegram, and to show you delivery and click results.
• To power Cas when you ask it for help.
• To take payments, credit your wallet, renew plans, issue receipts and pay referral earnings.
• To answer your support questions.
• To send you emails about your account, such as login codes, receipts and reminders.
• During your trial, to send you a short series of helpful emails about getting the most from Castvoo. You can unsubscribe from these at any time with the link in each email.
• To prevent fraud and abuse, enforce our Terms and keep Castvoo secure.
• To meet our legal duties, for example keeping financial records.
• To understand how Castvoo is used so we can fix problems and improve it.

We do not sell your personal data, and we do not share it with advertisers.

5. Our legal reasons for using your data

The law requires a reason for each use. These are ours.

• Contract: to provide the service you signed up for, including payments and support.
• Legitimate interests: to keep Castvoo secure, prevent fraud, improve the service and send trial emails about Castvoo, in a way that respects your rights and lets you opt out.
• Legal obligation: to keep records and respond to lawful requests from authorities.
• Consent: where we rely on your consent, such as signing in with Google, you can withdraw it at any time. This does not affect anything we did before you withdrew it.

6. Who we share data with (sub-processors)

We use a small number of trusted providers to run Castvoo. Each one gets only the data it needs for its job.

• Railway for hosting and our database.
• Telegram to deliver your messages to your subscribers.
• Anthropic to power Cas, our AI writing assistant. When you use Cas, the text you give it and the relevant notes from the Train Cas page are sent to Anthropic to create a reply.
• Paystack and Flutterwave to process card, bank transfer, USSD, instant EFT and mobile money payments, depending on your country.
• Gatevoo, a crypto checkout run by Zedapex, to create crypto payment pages and confirm USDT and Bitcoin payments. It receives the top-up amount, a payment reference and your first name. It never holds your money.
• VooSquare, the Zedapex account hub, if you sign in with VooSquare. It receives your account ID and activity totals (counts and amounts, never your subscribers' details).
• Resend to deliver our emails to you.
• Google for optional sign-in, only if you choose to sign in with Google.

Crypto payments are made on public blockchains. Transactions on a public blockchain, including the addresses and amounts involved, can be seen by anyone. This is how those networks work, and it is outside our control.

We may also share data if the law requires it, to protect people from harm or fraud, or as part of a merger, sale or reorganisation of our business. In that last case, this policy will continue to protect your data.

7. Data sent outside Nigeria

Some of our providers work in other countries. We make sure your data stays protected.

Some of the providers listed above are based in, or process data in, countries outside Nigeria. When we transfer personal data abroad, we do so in line with the NDPA and, where it applies, the GDPR, using safeguards such as contractual protections with our providers.

8. How long we keep data

We keep data only as long as we need it.

• While your account is active, we keep your account details and workspace content so the service works.
• When a plan ends, we keep your data for 60 days so you can come back and pick up where you left off. After that, we delete it.
• When you delete your account, we delete your account and workspace data. Deleted data may remain in secure backups for a short time until those backups are replaced.
• We keep payment and financial records for as long as the law requires, even after your account is deleted.
• If a subscriber blocks your bot, Castvoo removes them from your list automatically.

9. How we protect your data

We use strong, practical security.

• Bot tokens are encrypted at rest with AES-256-GCM.
• All connections to Castvoo use HTTPS.
• Staff can see only what their role allows.
• Staff actions are recorded in an audit log.

No system is perfectly secure. If a data breach affects your personal data, we will tell you and the relevant authorities as the law requires.

10. Your rights

Your data is yours. You can see it, take it, fix it or delete it.

Under the NDPA and, if you are in the EU or UK, the GDPR, you have the right to:

• know what personal data we hold about you and get a copy of it;
• correct data that is wrong or incomplete;
• have your data deleted;
• get your data in a common, machine-readable format and move it elsewhere;
• object to how we use your data, or ask us to limit it;
• object to marketing emails at any time;
• withdraw consent where we rely on it; and
• not be subject to decisions with legal or similarly serious effects based only on automated processing.

How to use your rights: you can export or delete your data yourself in Settings. You can also write to [email protected]. We may need to confirm who you are before we act. We reply within 30 days.

Complaints: if you are not happy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Nigeria Data Protection Commission, or, if you are in the EU or UK, to your local data protection authority.

11. Emails we send you

Account emails are part of the service. Trial tips are optional.

We send emails you need to use Castvoo, such as login codes, receipts, payment reminders and security notices. These cannot be turned off while you have an account. During your trial we also send a short series of tips about Castvoo. Each of those emails has an unsubscribe link.

12. Cookies

We use only two cookies, and neither is for advertising. We use one essential login cookie and one referral cookie. Our Cookie Policy explains them.

13. Children

Castvoo is for adults. Castvoo is not meant for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, please write to [email protected] and we will delete it.

14. Changes to this policy

If we change this policy, we will let you know. The date at the top shows when this policy last changed. If we make an important change, we will tell you by email or in the dashboard before it takes effect.

15. Contact us

For any privacy question or request, write to [email protected].

Zedapex, Lagos, Nigeria