Privacy Policy

1. Introduction

Rantera ("Rantera", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website, platform, and APIs (the "Services").

This Policy is compliant with the Nigeria Data Protection Act 2023 (NDPA) and, where applicable, other African data protection frameworks. If you are located in a jurisdiction with specific data protection requirements, additional rights and obligations may apply.

2. Data We Collect

2.1 Account Data

When you register, we collect:

• Full name and email address
• Password (stored as a cryptographic hash, we never store plaintext passwords)
• Country and preferred currency (optional)
• Organisation name (optional)
• OAuth provider data (if you sign in via Google or GitHub)

2.2 Usage Data

When you use the Services, we automatically collect:

• API request logs (model called, token counts, response time, status code)
• IP address and approximate geolocation (country/city level)
• Device type, browser, and operating system (via User-Agent)
• Timestamps of actions within the platform
• Error logs and crash reports

2.3 Billing Data

We collect billing information (payment method details, billing address) as required for payment processing. Full card details are processed by our payment provider and are not stored on Rantera's servers.

2.4 Communication Data

If you contact us by email or through the platform, we retain records of that communication to assist you and improve our support.

2.5 Model Input and Conversation Data

Prompts and responses ("conversation data") you generate through the Services may be collected and used by Rantera to train, fine-tune, evaluate, and improve our AI models. By using the Services, you consent to this use as described in our EULA Section 4.

Before any conversation data is used for training, we apply reasonable de-identification processes. You should avoid submitting highly sensitive personal information (such as national ID numbers, financial account details, or medical records) through the platform.

You may withdraw consent for AI training use at any time by emailing us at admin@rantera.ai with the subject "Withdraw AI Training Consent". See Section 5 for your full data rights.

3. How We Use Your Data

We use your data to:

• Provide, operate, and improve the Services
• Process transactions and send billing confirmations
• Authenticate your identity and prevent fraud
• Send transactional emails (e.g., account verification, API key alerts)
• Send product updates and announcements (you may opt out at any time)
• Monitor platform performance, detect errors, and ensure security
• Comply with legal obligations and respond to lawful requests
• Aggregate and anonymise usage statistics to understand platform trends
• Train, fine-tune, and improve Rantera AI models using anonymised conversation data (see Section 2.5)

We rely on the following legal bases under the NDPA: (a) performance of a contract (to provide the Services you have subscribed to); (b) legitimate interests (platform security, fraud prevention, analytics); and (c) your consent (marketing communications, optional data programmes).

4. African Data Protection Compliance

Rantera is incorporated and primarily operates in Nigeria. We comply with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR). Our practices are also informed by comparable frameworks including Kenya's Data Protection Act 2019 and Ghana's Data Protection Act 2012.

Where we transfer data outside Nigeria, we implement appropriate safeguards including standard contractual clauses and ensure that recipient countries or organisations provide adequate protection.

5. Your Rights

Under the NDPA and applicable data protection law, you have the right to:

• Access: request a copy of personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data (subject to legal obligations)
• Portability: receive your account data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: withdraw consent for marketing or optional data programmes at any time

To exercise any of these rights, email us at admin@rantera.ai with the subject line "Data Rights Request". We will respond within 21 days.

6. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Services. Specifically:

• Account data: retained for the life of your account plus 12 months after deletion
• API request logs: retained for 90 days for operational purposes, then anonymised
• Billing records: retained for 7 years as required by Nigerian tax law
• Communication records: retained for 3 years
• Conversation data: retained for up to 24 months for model training and improvement purposes (anonymised before use in training)

7. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: payment processors, hosting providers, email delivery services, acting as data processors under our instruction
• Legal authorities: where required by Nigerian law, court order, or to prevent imminent harm
• Business transfers: in the event of a merger, acquisition, or asset sale; you will be notified

8. Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest for sensitive fields, role-based access controls, and regular security reviews. No system is 100% secure; we will notify you promptly in the event of a data breach that affects your personal data.

9. Cookies

We use cookies and similar tracking technologies to operate the platform. For full details, see our Cookie Policy.

10. Children's Privacy

The Services are not directed at children under 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or prominent notice on the platform. Continued use of the Services after changes take effect constitutes acceptance of the revised Policy.

12. Contact

For privacy-related questions, requests, or complaints, contact our Data Protection point of contact:

If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.