Privacy Policy

1. Who We Are

AfriTerminal ("we", "us", "our") is a financial data platform providing aggregated market data, company filings, and economic indicators for African capital markets.

For the purposes of data protection law, we are the data controller of any personal information we hold about you.

2. What This Policy Covers

This policy explains what information we collect, why we collect it, how we use it, and your rights in relation to it. It applies to afriterminal.github.io and any associated services.

3. What Data We Collect and Why

3.1 Without an account

We do not collect any personal information. The platform is served as a static website. Any preferences you set — such as watchlists or alerts — are stored locally on your own device using your browser's localStorage and are never transmitted to us.

GitHub Pages, which hosts this service, may collect standard server access logs (including IP addresses) as part of their infrastructure. This is governed by GitHub's Privacy Statement.

3.2 When you create an account (Pro, Team, or Enterprise)

When you register, we collect:

• Your email address — to identify your account and send service communications
• A hashed password — we never store your password in readable form
• Your subscription tier (Free, Pro, Team, or Enterprise)
• Your watchlist and alert preferences (synced to your account)
• The date your account was created

Legal basis (UK GDPR / NDPA 2023): Contract — this data is necessary to provide the service you have subscribed to.

3.3 When you make a payment

Payments are processed by Paystack. We never see, store, or have access to your card number, CVV, or full card details. Paystack is PCI DSS certified and handles all payment card data under their own security standards.

We retain a record of: the amount charged, the date of charge, and your subscription tier, for accounting and billing dispute purposes.

Legal basis: Legal obligation (financial record-keeping requirements).

3.4 Usage data

We may in future collect anonymised usage data such as which sections of the platform you visit most frequently. We will update this policy and notify existing users by email before collecting this data.

4. How We Use Your Data

We use your data only for the purposes stated at collection:

• To operate your account and deliver the service you subscribed to
• To send transactional emails (payment receipts, password resets)
• To enforce our Terms of Use
• To meet our legal and financial record-keeping obligations

We do not use your data for advertising. We do not sell your data to third parties. We do not use your data to train machine learning models without your explicit consent.

5. Who We Share Data With

We share data only with the service providers necessary to operate the platform:

Provider	Purpose	Data shared
Supabase	Database and authentication	Email, hashed password, watchlist, subscription tier
Paystack	Payment processing	Email address, payment amount
GitHub Pages	Platform hosting	Connection metadata (IP, request logs)

We do not share your data with advertisers, data brokers, or analytics platforms.

6. Data Retention

• Account data: retained while your account is active, plus 12 months after closure
• Payment records: retained for 7 years (financial record-keeping legal requirement)
• localStorage data: stored on your own device only — we have no access to it

7. Your Rights

Under UK GDPR and the Nigeria Data Protection Act 2023, you have the right to:

• Access — request a copy of all personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and associated data
• Portability — request your data in a machine-readable format (JSON or CSV)
• Objection — object to processing based on legitimate interests
• Restriction — request that we limit how we process your data

To exercise any of these rights, email info@afriterminal.com. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with:

• Nigeria Data Protection Commission (NDPC): ndpc.gov.ng
• UK Information Commissioner's Office (ICO): ico.org.uk
• South Africa Information Regulator: inforegulator.org.za

8. Cookies

The dashboard currently does not use cookies. If we introduce cookies in future (for example, to maintain a login session), we will update this policy and present a cookie notice before any non-essential cookies are set.

9. Security

We use industry-standard security measures including bcrypt password hashing, HTTPS-only connections, and Supabase row-level security policies. Please do not share your password with anyone. Contact us immediately if you believe your account has been compromised.

10. Children

AfriTerminal is a professional financial data platform intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, contact info@afriterminal.com and we will delete it promptly.

11. International Data Transfers

If you are located in Nigeria, your data may be stored on Supabase servers in the United States or European Union. Where data is transferred outside Nigeria, we ensure appropriate safeguards consistent with the Nigeria Data Protection Act 2023.

If you are located in the European Union or United Kingdom, your data is processed in accordance with UK GDPR and EU GDPR respectively.

12. Changes to This Policy

We will notify registered users by email of any material changes at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version. Continued use of AfriTerminal after the effective date constitutes acceptance of the updated policy.

13. Governing Law

This Privacy Policy is governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.

14. Contact