Privacy Notice

1. Information we collect

• Operator registration, owner and team details, including names, email addresses, phone numbers and business information.
• Network and router information required for setup, health monitoring and secure management.
• Package, voucher, customer, support, payment-reference and wallet-ledger records.
• Security and audit information such as sign-ins, IP address, device/browser details, actions, failures and timestamps.
• Messages, waitlist entries and contact enquiries submitted to Exentra.

Payment secret keys are encrypted before storage and are not displayed again. Exentra does not need a customer’s full card number or card security code; payment providers process those details.

2. Why we process information

We use information to provide and secure the service, verify identities and payments, issue access, support operators and customers, prevent abuse, reconcile fees, meet legal obligations, improve reliability and communicate important service information.

Depending on the context, processing is based on performing a contract, legitimate interests in operating and securing Exentra, consent where required, and compliance with legal obligations.

3. Operator and Exentra data roles

For an operator’s hotspot customers, the operator generally decides why customer information is collected and is the data controller. Exentra processes that information to provide the operator’s billing and network service and acts as a processor where applicable. Exentra is a controller for its own operator accounts, platform security, billing, waitlist, contact and legal records.

Operators must give customers an appropriate privacy notice and collect only information they are authorised to use.

4. Storage, service providers and transfers

We share only what is reasonably necessary with infrastructure, email, security, support and payment providers used to deliver Exentra. Operator-owned gateways receive payment information under the operator’s own agreement. We may also disclose information where required by law, to protect rights and safety, or during a properly governed business transaction.

We apply access controls, encryption for sensitive credentials, audit records and tenant separation. No internet service is risk-free, so operators must also secure their email, routers, staff access and local devices.

Information is retained for as long as needed for service delivery, security, disputes, financial records and legal obligations, then deleted or anonymised under the applicable retention process.

5. Choices and data-subject rights

Subject to applicable Nigerian data-protection law, a person may request access, correction, deletion, restriction, objection, portability or withdrawal of consent where relevant. Some records may need to be retained for security, accounting, disputes or legal compliance.

Hotspot customers should first contact the operator shown on the portal. Exentra will assist the operator with valid requests when acting as its processor.