Privacy Policy

Welcome to Antimony ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial management application and services.

By using Antimony, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

This Privacy Policy applies to all information collected through our application, website, and any related services (collectively, the "Services").

2.1 Information You Provide

We collect information that you voluntarily provide to us when you:

• Register for an account (name, email address)
• Connect your Gmail account via OAuth
• Manually enter transaction data
• Contact customer support
• Subscribe to our services
• Participate in surveys or feedback

2.2 Information Automatically Collected

When you use our Services, we automatically collect:

• Email Data: We access only bank transaction notification emails from your Gmail account using read-only permissions (Gmail API scope: gmail.readonly). We do not access, read, or store your personal emails, drafts, or other correspondence.
• Transaction Information: Details extracted from your bank notifications (amounts, dates, merchant names, account numbers)
• Usage Data: Information about how you interact with our Services (features used, time spent, clicks)
• Device Information: Device type, operating system, browser type, IP address
• Cookies and Similar Technologies: We use cookies to maintain your session and improve user experience

2.3 Financial Information

We do NOT store your bank account passwords or login credentials. We only access your Gmail account with explicit read-only permission to retrieve banking notification emails. We extract transaction details (amount, date, merchant, account number) from these emails for display in your dashboard.

3.1 How We Use Gmail Data

Gmail data obtained through Google APIs is used EXCLUSIVELY for the following purposes:

• Identifying and retrieving bank transaction notification emails
• Extracting transaction information (amount, date, merchant, account details) to display in your dashboard
• Storing extracted transaction data (not raw email content) in your Antimony account

We explicitly DO NOT use Gmail data for: targeted advertising, selling to data brokers or information resellers, determining credit-worthiness, lending purposes, personalized or interest-based advertising, creating unrelated databases, or training AI/machine learning models.

3.2 How We Use Other Information

For non-Gmail data (account information, manually entered data, usage data), we use it for:

• Service Provision: To provide, maintain, and improve our financial tracking services
• Transaction Processing: To extract, categorize, and display your financial transactions
• Personalization: To customize your experience and provide relevant insights
• Communication: To send you service updates, security alerts, and support messages
• Analytics: To understand usage patterns and improve our Services
• Security: To detect, prevent, and address technical issues and fraudulent activity
• Legal Compliance: To comply with applicable laws and regulations
• Marketing: To send promotional communications (you can opt-out anytime)

4.1 Security Measures

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit using 256-bit SSL/TLS encryption
• Database Encryption: All data at rest is encrypted using AES-256 encryption
• Access Controls: Strict access controls limit who can access your data internally
• Secure Infrastructure: We use reputable cloud providers with SOC 2 Type II certification
• Regular Audits: We conduct regular security audits and penetration testing
• OAuth Security: Gmail access is secured via Google OAuth 2.0 with read-only permissions

4.2 Data Location

Your data is primarily stored on secure cloud servers. We use industry-leading cloud infrastructure providers that comply with international security standards.

We use the following third-party services that may collect and process your information:

5.1 Google OAuth

We use Google OAuth 2.0 to securely access your Gmail account with read-only permissions. Our use of information received from Gmail APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google's Privacy Policy governs their handling of your authentication data. We only access emails from banks and never read your personal correspondence.

5.2 Paystack

Payment processing is handled by Paystack. We do not store your credit card information. Paystack's Privacy Policy governs their handling of your payment data.

5.3 Analytics Services

We may use analytics services (e.g., Google Analytics) to understand usage patterns. These services may use cookies and similar technologies to collect information about your use of our Services.

5.4 Data Sharing

We do NOT sell, rent, or trade your personal information to third parties. Gmail data obtained through Google APIs is used exclusively to provide our transaction tracking service and is never shared with third parties, except as required by law or with your explicit consent. We do not transfer Gmail data to third parties for advertising, analytics, or any purposes outside of providing our core service functionality.

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data we hold
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Export: Request a machine-readable copy of your data (data portability)
• Restriction: Request restriction of processing your data
• Objection: Object to our processing of your data
• Withdraw Consent: Withdraw consent for data processing at any time
• Opt-Out: Opt-out of marketing communications

To exercise these rights, contact us at privacy@antimony.com.ng. We will respond to your request within 30 days.

We retain your personal information for as long as necessary to:

• Provide our Services to you
• Comply with legal obligations (e.g., tax records, financial regulations)
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal or regulatory reasons.

Your information may be transferred to and processed in countries other than Nigeria. These countries may have data protection laws that differ from Nigerian laws.

We ensure appropriate safeguards are in place to protect your data when it is transferred internationally, including standard contractual clauses approved by regulatory authorities.

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@antimony.com.ng.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of our Services after any changes constitutes your acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: