Who else touches your data
The full list of third parties that process personal data on Ridim's behalf — what each one does, what it actually receives, and whether the data leaves Nigeria to get there.
The short version
- •25 providers, all named. We used to say "email us for the list". That wasn't good enough, so here it is.
- •Your money stays in Nigeria. Payments, SMS, airtime and data rewards are all handled by Nigerian companies.
- •The support chat sends what you type to DeepSeek, in China, to draft a reply. Don't put a PIN, password or card number into any chat.
- •Our ops alerts run through Telegram, and they carry names, phone numbers and bank account numbers to a private team channel hosted outside Nigeria.
- •Nothing analytics-related loads unless you accept cookies.
This summary is here to be readable, not to be relied on — the numbered sections below are the full text.
Contents (12)
How to read this list
A sub-processor is a company we hand personal data to so it can do a job on our behalf — take a payment, send an email, deliver airtime, check whether a claim is coming from a VPN. Each one is under contract, gets only what it needs for that job, and is not allowed to use it for its own purposes.
Every entry below names the file in our own codebase where the integration lives, because a register that isn't checked against the code drifts. This list currently has 25 entries.
Read this alongside the Privacy Policy, which explains what we collect and why. Nothing here replaces it.
The two worth reading twice
Most of the list is unsurprising — a payment processor sees payment details, an email provider sees your email address. Two are not obvious from the job title, so they are spelled out here rather than left in a table cell.
DeepSeek — China
Free text you type into the support chat is sent to DeepSeek in China to draft a reply. This is the furthest any of your data travels, and it is the one place where what you type — rather than a record about you — leaves the platform in your own words. Never put a PIN, password or card detail into any chat; we will never ask for one.
Telegram — Outside Nigeria — Telegram is operated from the UAE and does not publish a per-message data location
Our operations alerts go to a private Telegram channel that only the Ridim team can read, and those alerts contain real identifying detail — the recipient's name, phone number, bank name and bank account number for a reward or payout. It is an internal channel, not a public one, but it is a third-party messaging service and it sits outside Nigeria.
Payments
Money in and money out.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Korapay | Our licensed payment processor: card and transfer checkout, dedicated virtual accounts, bank account-name lookup, and every payout we make. | Name; Email; Phone number; Bank name, account number and account name; Transaction amounts and references | Nigeria Stays in Nigeria |
Infrastructure
Where the platform runs and where your records are stored.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Google Cloud / Firebase | Our primary database and file store: accounts and authentication (Firebase Auth), all application data (Firestore), live game state (Realtime Database) and uploaded files such as event banners and KYC documents (Cloud Storage). | Everything we hold about you that is not transient; Identity and contact details; KYC/KYB documents; Wallet balances and transaction history; Tickets, claims and gameplay records | United States (Google LLC), with global infrastructure |
| Vercel | Hosts and serves the Ridim application. Every request you make to the site passes through it. | IP address; Device and browser type; Requested URLs; Anything you submit through the site, in transit | United States |
| Upstash (Redis & QStash) | Short-lived caching, rate limiting, one-time-code storage and the queue that runs our scheduled and background jobs. | IP address; Phone number (rate-limit and one-time-code keys, hashed where stored); Job payloads containing record identifiers | United States (Upstash, Inc.) |
Email & SMS
Everything we send you.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Zoho ZeptoMail | Sends every transactional email — ticket confirmations, receipts, payslips, voucher codes and account notices. | Name; Email address; The contents of the email, including ticket, order and payout details | United States (Zoho Corporation) |
| Zoho Campaigns | Holds our marketing mailing list and sends the newsletters you opted into. Nothing goes here without consent. | Name; Email address; Subscription status | United States (Zoho Corporation) |
| Termii | Our primary one-time-code SMS route for phone verification. | Phone number; The one-time code | Nigeria Stays in Nigeria |
| Sendchamp | Delivers one-time verification codes by SMS and WhatsApp, and is the fallback when Termii cannot deliver. | Phone number; The one-time code | Nigeria Stays in Nigeria |
| BulkSMS Nigeria | General-purpose SMS — voucher one-time codes, payrun authorisation codes and alerts — and the last-resort fallback for verification codes. | Phone number; The text of the message | Nigeria Stays in Nigeria |
| Africa's Talking | Runs the USSD shortcode people can dial to claim a reward without the web, and sends the confirmation SMS for it. | Phone number; USSD session input; Network operator | Kenya |
| Qrios | Runs the USSD shortcode people can dial to claim a reward without the web. | Phone number; USSD session input; Network operator | Nigeria Stays in Nigeria |
| Infobip | Carries the WhatsApp claim bot conversation. | WhatsApp phone number; The messages you send the bot and its replies | Croatia (European Union) |
| Expo | Delivers push notifications to the mobile app (for example, telling a creator a reward was claimed). | Device push token; The notification text | United States |
Reward delivery
How a reward actually reaches the person claiming it.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| ClubKonnect (Nellobyte Systems) | Delivers airtime, mobile data and betting-wallet top-up rewards. Your number is passed on to your mobile network so the reward can land. | Phone number; Mobile network; Betting customer ID, where that is the reward; Reward amount | Nigeria Stays in Nigeria |
| goQR.me (api.qrserver.com) | Renders the QR image embedded in ticket emails. Only the ticket's own reference is encoded — no name, email or payment detail is sent. | Ticket reference | Germany |
AI
Where free text and public posts are sent to be read by a model.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| DeepSeek | The model behind the support-chat assistant and the event/campaign drafting assistants. It also scores entries in hashtag reward campaigns. | Everything you type into the support chat, verbatim; The event or campaign description you type into a drafting assistant; Public social posts entered into a hashtag campaign | China |
| captapi | Reads the public comments under a TikTok, Instagram or Facebook post entered into a social reward campaign. | The public post URL; Public comment text and the commenter's public handle | Not publicly disclosed by the vendor |
| X (Twitter) API | Reads public posts and replies for hashtag and X comment reward campaigns. Read-only — we never post as you. | Public post text; Public handle | United States (X Corp.) |
Support & ops
How you reach us and how alerts reach the team.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Telegram | Carries our internal operations alerts to the Ridim team, and relays support-chat messages so a human can answer you from their phone. | Name and account name; Phone number; Bank name and bank account number; Reward and transaction amounts; The support messages you send us, and the page you sent them from | Outside Nigeria — Telegram is operated from the UAE and does not publish a per-message data location |
| Tawk.to Loads only if you accept cookies | Live-chat widget used alongside our own support chat. It loads only if you accept cookies in the banner. | The chat messages you send; IP address; Pages visited during the chat | United States |
Fraud & abuse
Checks that keep rewards away from bots and farmers.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| proxycheck.io | Tells us whether a reward claim is arriving through a VPN, proxy or datacentre — the single strongest signal of reward farming. | IP address | United Kingdom |
| ip-api.com | The fallback proxy/VPN check, used only when proxycheck.io is unreachable. | IP address | Germany |
| Google reCAPTCHA | Proves a reward claim or raffle entry came from a person rather than a script. | IP address; Browser and device signals collected by the reCAPTCHA widget | United States (Google LLC) |
Analytics
Aggregate usage measurement — consent-gated, all of it.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Google Analytics Loads only if you accept cookies | Aggregate page and traffic statistics, so we can tell which pages work. | IP address; Pages visited; Referrer; Device type | United States (Google LLC) |
| Vercel Web Analytics Loads only if you accept cookies | Cookieless page-view counts. Loaded behind the same consent gate as Google Analytics, because we told you declining means nothing analytics-related loads. | Pages visited; Referrer; Country; Device type | United States |
Transfers out of Nigeria
Ridim is a Nigerian business and our payment, SMS and reward-delivery partners are Nigerian. Our hosting, database, email and AI providers are not — the "Where" column above says so for each one.
Where personal data is transferred out of Nigeria, we do so on a basis permitted by the Nigeria Data Protection Act 2023 — an adequate destination, appropriate contractual safeguards, or another lawful ground — and we require the provider to protect it to the standard set out in our Privacy Policy.
Changes to this list
We update this page when we add, replace or drop a provider. The effective date at the top always reflects the current version.
If you object to a specific sub-processor, email hello@ridim.com.ng and tell us which one and why. We cannot always offer an alternative — you cannot take a card payment without a payment processor — but we will tell you honestly what the options are.
Questions about anything on this page, or a data-subject request under the NDPA, go to hello@ridim.com.ng. The Privacy Policy sets out your rights and how to exercise them.
Something here unclear?
Ask before you agree. A person will explain any clause on this page in ordinary language — no lawyer required.