Privacy Policy

1. Introduction

Rantera ("Rantera", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website, platform, and APIs (the "Services").

This Policy is compliant with the Nigeria Data Protection Act 2023 (NDPA) and, where applicable, other African data protection frameworks. If you are located in a jurisdiction with specific data protection requirements, additional rights and obligations may apply.

2. Data We Collect

2.1 Account Data

When you register, we collect:

• Full name and email address
• Password (stored as a cryptographic hash, we never store plaintext passwords)
• Country and preferred currency (optional)
• Organisation name (optional)
• OAuth provider data (if you sign in via Google or GitHub)

2.2 Usage Data

When you use the Services, we automatically collect:

• API request logs (model called, token counts, response time, status code)
• IP address and approximate geolocation (country/city level)
• Device type, browser, and operating system (via User-Agent)
• Timestamps of actions within the platform
• Error logs and crash reports

2.3 Billing Data

We collect billing information (payment method details, billing address) as required for payment processing. Full card details are processed by our payment provider and are not stored on Rantera's servers.

2.4 Communication Data

If you contact us by email or through the platform, we retain records of that communication to assist you and improve our support.

2.5 Model Input Data

Prompts and data you submit to AI models ("Input") may be temporarily processed to generate responses. By default, we do not use your Input to train our models unless you have explicitly opted in to a data-contribution programme. See Section 5 for your rights around Input data.

3. How We Use Your Data

We use your data to:

• Provide, operate, and improve the Services
• Process transactions and send billing confirmations
• Authenticate your identity and prevent fraud
• Send transactional emails (e.g., account verification, API key alerts)
• Send product updates and announcements (you may opt out at any time)
• Monitor platform performance, detect errors, and ensure security
• Comply with legal obligations and respond to lawful requests
• Aggregate and anonymise usage statistics to understand platform trends

We rely on the following legal bases under the NDPA: (a) performance of a contract (to provide the Services you have subscribed to); (b) legitimate interests (platform security, fraud prevention, analytics); and (c) your consent (marketing communications, optional data programmes).

4. African Data Protection Compliance

Rantera is incorporated and primarily operates in Nigeria. We comply with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR). Our practices are also informed by comparable frameworks including Kenya's Data Protection Act 2019 and Ghana's Data Protection Act 2012.

Where we transfer data outside Nigeria, we implement appropriate safeguards including standard contractual clauses and ensure that recipient countries or organisations provide adequate protection.

5. Your Rights

Under the NDPA and applicable data protection law, you have the right to:

• Access: request a copy of personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data (subject to legal obligations)
• Portability: receive your account data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: withdraw consent for marketing or optional data programmes at any time

To exercise any of these rights, email us at rantera.ai@gmail.com with the subject line "Data Rights Request". We will respond within 21 days.

6. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Services. Specifically:

• Account data: retained for the life of your account plus 12 months after deletion
• API request logs: retained for 90 days for operational purposes, then anonymised
• Billing records: retained for 7 years as required by Nigerian tax law
• Communication records: retained for 3 years
• Model Input data: processed in real time and not persistently stored by default

7. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers — payment processors, hosting providers, email delivery services, acting as data processors under our instruction
• Legal authorities — where required by Nigerian law, court order, or to prevent imminent harm
• Business transfers — in the event of a merger, acquisition, or asset sale; you will be notified

8. Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest for sensitive fields, role-based access controls, and regular security reviews. No system is 100% secure; we will notify you promptly in the event of a data breach that affects your personal data.

9. Cookies

We use cookies and similar tracking technologies to operate the platform. For full details, see our Cookie Policy.

10. Children's Privacy

The Services are not directed at children under 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or prominent notice on the platform. Continued use of the Services after changes take effect constitutes acceptance of the revised Policy.

12. Contact

For privacy-related questions, requests, or complaints, contact our Data Protection point of contact:

If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.