Privacy Policy
Last updated: December 30, 2024
1. Introduction
Welcome to Antimony ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial management application and services.
By using Antimony, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
This Privacy Policy applies to all information collected through our application, website, and any related services (collectively, the "Services").
2. Information We Collect
2.1 Information You Provide
We collect information that you voluntarily provide to us when you:
- Register for an account (name, email address)
- Connect your Gmail account via OAuth
- Manually enter transaction data
- Contact customer support
- Subscribe to our services
- Participate in surveys or feedback
2.2 Information Automatically Collected
When you use our Services, we automatically collect:
- Email Data: Banking transaction notification emails from your connected Gmail account (read-only access)
- Transaction Information: Details extracted from your bank notifications (amounts, dates, merchant names, account numbers)
- Usage Data: Information about how you interact with our Services (features used, time spent, clicks)
- Device Information: Device type, operating system, browser type, IP address
- Cookies and Similar Technologies: We use cookies to maintain your session and improve user experience
2.3 Financial Information
We do NOT store your bank account passwords or login credentials. We only access your Gmail account with explicit read-only permission to retrieve banking notification emails. We extract transaction details (amount, date, merchant, account number) from these emails for display in your dashboard.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Service Provision: To provide, maintain, and improve our financial tracking services
- Transaction Processing: To extract, categorize, and display your financial transactions
- Personalization: To customize your experience and provide relevant insights
- Communication: To send you service updates, security alerts, and support messages
- AI Improvement: To train and improve our AI models for better categorization accuracy
- Analytics: To understand usage patterns and improve our Services
- Security: To detect, prevent, and address technical issues and fraudulent activity
- Legal Compliance: To comply with applicable laws and regulations
- Marketing: To send promotional communications (you can opt-out anytime)
4. Data Storage and Security
4.1 Security Measures
We implement industry-standard security measures to protect your data:
- Encryption: All data is encrypted in transit using 256-bit SSL/TLS encryption
- Database Encryption: All data at rest is encrypted using AES-256 encryption
- Access Controls: Strict access controls limit who can access your data internally
- Secure Infrastructure: We use reputable cloud providers with SOC 2 Type II certification
- Regular Audits: We conduct regular security audits and penetration testing
- OAuth Security: Gmail access is secured via Google OAuth 2.0 with read-only permissions
4.2 Data Location
Your data is primarily stored on secure cloud servers. We use industry-leading cloud infrastructure providers that comply with international security standards.
5. Third-Party Services
We use the following third-party services that may collect and process your information:
5.1 Google OAuth
We use Google OAuth 2.0 to securely access your Gmail account with read-only permissions. Google's Privacy Policy governs their handling of your authentication data. We only access emails from banks and never read your personal correspondence.
5.2 Paystack
Payment processing is handled by Paystack. We do not store your credit card information. Paystack's Privacy Policy governs their handling of your payment data.
5.3 Analytics Services
We may use analytics services (e.g., Google Analytics) to understand usage patterns. These services may use cookies and similar technologies to collect information about your use of our Services.
5.4 Data Sharing
We do NOT sell your personal information. We only share your data with third parties as described in this policy or with your explicit consent.
6. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data we hold
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data ("right to be forgotten")
- Export: Request a machine-readable copy of your data (data portability)
- Restriction: Request restriction of processing your data
- Objection: Object to our processing of your data
- Withdraw Consent: Withdraw consent for data processing at any time
- Opt-Out: Opt-out of marketing communications
To exercise these rights, contact us at privacy@antimony.com.ng. We will respond to your request within 30 days.
7. Data Retention
We retain your personal information for as long as necessary to:
- Provide our Services to you
- Comply with legal obligations (e.g., tax records, financial regulations)
- Resolve disputes and enforce our agreements
When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal or regulatory reasons.
8. International Transfers
Your information may be transferred to and processed in countries other than Nigeria. These countries may have data protection laws that differ from Nigerian laws.
We ensure appropriate safeguards are in place to protect your data when it is transferred internationally, including standard contractual clauses approved by regulatory authorities.
9. Children's Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@antimony.com.ng.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date
- Sending you an email notification (for significant changes)
Your continued use of our Services after any changes constitutes your acceptance of the updated policy.
11. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us: