Privacy Policy

Last updated: December 30, 2024

1. Introduction

Welcome to Antimony ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial management application and services.

By using Antimony, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

This Privacy Policy applies to all information collected through our application, website, and any related services (collectively, the "Services").

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us when you:

  • Register for an account (name, email address)
  • Connect your Gmail account via OAuth
  • Manually enter transaction data
  • Contact customer support
  • Subscribe to our services
  • Participate in surveys or feedback

2.2 Information Automatically Collected

When you use our Services, we automatically collect:

  • Email Data: Banking transaction notification emails from your connected Gmail account (read-only access)
  • Transaction Information: Details extracted from your bank notifications (amounts, dates, merchant names, account numbers)
  • Usage Data: Information about how you interact with our Services (features used, time spent, clicks)
  • Device Information: Device type, operating system, browser type, IP address
  • Cookies and Similar Technologies: We use cookies to maintain your session and improve user experience

2.3 Financial Information

We do NOT store your bank account passwords or login credentials. We only access your Gmail account with explicit read-only permission to retrieve banking notification emails. We extract transaction details (amount, date, merchant, account number) from these emails for display in your dashboard.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Provision: To provide, maintain, and improve our financial tracking services
  • Transaction Processing: To extract, categorize, and display your financial transactions
  • Personalization: To customize your experience and provide relevant insights
  • Communication: To send you service updates, security alerts, and support messages
  • AI Improvement: To train and improve our AI models for better categorization accuracy
  • Analytics: To understand usage patterns and improve our Services
  • Security: To detect, prevent, and address technical issues and fraudulent activity
  • Legal Compliance: To comply with applicable laws and regulations
  • Marketing: To send promotional communications (you can opt-out anytime)

4. Data Storage and Security

4.1 Security Measures

We implement industry-standard security measures to protect your data:

  • Encryption: All data is encrypted in transit using 256-bit SSL/TLS encryption
  • Database Encryption: All data at rest is encrypted using AES-256 encryption
  • Access Controls: Strict access controls limit who can access your data internally
  • Secure Infrastructure: We use reputable cloud providers with SOC 2 Type II certification
  • Regular Audits: We conduct regular security audits and penetration testing
  • OAuth Security: Gmail access is secured via Google OAuth 2.0 with read-only permissions

4.2 Data Location

Your data is primarily stored on secure cloud servers. We use industry-leading cloud infrastructure providers that comply with international security standards.

5. Third-Party Services

We use the following third-party services that may collect and process your information:

5.1 Google OAuth

We use Google OAuth 2.0 to securely access your Gmail account with read-only permissions. Google's Privacy Policy governs their handling of your authentication data. We only access emails from banks and never read your personal correspondence.

5.2 Paystack

Payment processing is handled by Paystack. We do not store your credit card information. Paystack's Privacy Policy governs their handling of your payment data.

5.3 Analytics Services

We may use analytics services (e.g., Google Analytics) to understand usage patterns. These services may use cookies and similar technologies to collect information about your use of our Services.

5.4 Data Sharing

We do NOT sell your personal information. We only share your data with third parties as described in this policy or with your explicit consent.

6. Your Rights

You have the following rights regarding your personal data:

  • Access: Request a copy of your personal data we hold
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data ("right to be forgotten")
  • Export: Request a machine-readable copy of your data (data portability)
  • Restriction: Request restriction of processing your data
  • Objection: Object to our processing of your data
  • Withdraw Consent: Withdraw consent for data processing at any time
  • Opt-Out: Opt-out of marketing communications

To exercise these rights, contact us at privacy@antimony.com.ng. We will respond to your request within 30 days.

7. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our Services to you
  • Comply with legal obligations (e.g., tax records, financial regulations)
  • Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal or regulatory reasons.

8. International Transfers

Your information may be transferred to and processed in countries other than Nigeria. These countries may have data protection laws that differ from Nigerian laws.

We ensure appropriate safeguards are in place to protect your data when it is transferred internationally, including standard contractual clauses approved by regulatory authorities.

9. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@antimony.com.ng.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last Updated" date
  • Sending you an email notification (for significant changes)

Your continued use of our Services after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: privacy@antimony.com.ng

Support: support@antimony.com.ng

Address: Lagos, Nigeria