This policy explains what personal data Antly One collects, why we need it, who we share it with, how long we keep it and the rights you have. We keep it as short and plain as we can.
1. Who we are
Antly One is provided by Byte Cognetics Ltd., and we are the data controller for the personal data of people who use Antly One: owners and staff who sign in, and people who visit this website or contact us.
When a business records details about its own customers or staff in Antly One, the business is the controller and we process that data for it. Section 9 explains this.
We follow the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Commission’s directives, and the UK GDPR where it applies.
2. What we collect
| What | Examples |
|---|---|
| Account details | Your phone number, name, the businesses you belong to and your role in each. |
| Business details | Business name, type, address and branches, opening hours, and logo. |
| Business records | Items, stock, sales, receipts, expenses, customer jobs, measurements, tasks, notes and photos you add. |
| Contacts you choose | Only the phone contacts you pick to add as a customer or staff member. We never read your whole address book. |
| Payment and verification details | If you collect payments online: your payout bank account, and the identity or CAC registration details needed to verify your business. |
| Security and device data | Device type, app version, sign-in times, IP address and an audit trail of changes made in your business. |
| Messages with us | What you send to our support team and our replies. |
3. What we do not do
- We do not sell personal data or share it for advertising.
- The app has no advertising or analytics trackers, and this website sets no tracking cookies.
- We do not message your customers unless you ask us to, for example by sending a receipt or a payment link.
4. Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Creating your account, signing you in and running Antly One for your business | Performing our contract with you |
| Collecting payments for your business and paying you out | Performing our contract; legal obligations (anti-fraud and financial rules) |
| Keeping accounts secure, preventing fraud and investigating misuse | Legitimate interests; legal obligations |
| Answering support requests and telling you about changes to the service | Performing our contract; legitimate interests |
| Keeping financial records and responding to lawful requests | Legal obligations |
| News and offers from Antly One | Your consent, which you can withdraw at any time |
5. Who we share it with
We share personal data only with companies that help us run Antly One, under contracts that require them to protect it:
- Hosting and storage: Amazon Web Services, in London.
- Text and WhatsApp messages: SMS providers and Meta (WhatsApp), to send sign-in codes, receipts and the messages you choose to send.
- Payments: our payment processors (VestraPay and Paystack) when your customers pay online, and the banks and verification providers we use to check businesses and pay them out.
- App stores: Apple and Google, when you download the app.
- Advisers and authorities: our auditors and lawyers, and courts, regulators or the police where the law requires it.
If Byte Cognetics Ltd. or Antly One is sold or merged, personal data may pass to the new owner under this policy.
6. Data outside Nigeria
Antly One’s data is stored in the United Kingdom, and some providers may process it in other countries. When personal data leaves Nigeria we rely on the safeguards the Nigeria Data Protection Act allows, such as the destination country’s adequate level of protection or contractual protections with the recipient.
7. How long we keep it
| Data | How long |
|---|---|
| Your account | While you use Antly One. When you ask to delete it you are signed out at once, and it is deleted 30 days later unless you sign in again before then. |
| Sales, payments, receipts and stock records | 6 years, as the law requires each business to keep them. Your name stays on the sales and work you recorded. |
| A business you own alone | If you delete your account it closes, and its records are kept for 6 years, then deleted. |
| Sign-in codes | They expire after 5 minutes. |
| Security logs and support messages | Only as long as needed to keep the service secure and to deal with your request. |
Details a business keeps about you as a member of staff (such as next of kin, guarantors and documents) belong to that business. Ask its owner to remove them.
8. Keeping it safe
Each business’s records are kept apart at the database itself. Data travels over encrypted connections, sign-in uses one-time codes and device PINs, sensitive changes need a fresh code, and changes are recorded in an audit trail. Read more on our security page. If a breach puts your rights at risk, we will tell you and the Nigeria Data Protection Commission as the law requires.
9. Your customers’ and staff data
When you record details about your customers (such as names, phone numbers, measurements and what they owe) or your staff, your business is the controller of that data and we are its processor. We use it only to run Antly One for you, keep it confidential, protect it as described here, and help you answer requests from those people.
You are responsible for having a lawful basis to collect it, for telling those people how you use it, and for keeping it accurate. If one of your customers or staff asks us about their data, we will pass the request to you.
10. Your rights
Under the Nigeria Data Protection Act you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, subject to what the law makes us keep;
- restrict or object to how we use it;
- give your data to you, or to another service, in a common format;
- withdraw your consent where we rely on it.
Write to privacy@antly.one. We may need to confirm it is you, and we will reply within one month. You can delete your account yourself in the app or at antly.one/delete-account.
If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
11. Children
Antly One is for adults running a business. We do not knowingly collect data from anyone under 18.
12. Changes to this policy
We will update this policy when what we do changes. If a change matters, we will tell you in the app before it applies. The date at the top shows when it last changed.
Contact us
Byte Cognetics Ltd., the company behind Antly One. Questions about this policy: legal@antly.one. Privacy questions: privacy@antly.one.