Privacy Policy.
This Privacy Policy explains what information Alumni Assets collects when you use our website, web platform and mobile app (together, the Service), how we use it, who we share it with, how long we keep it, and the choices you have. We have written it in plain language. If anything is unclear, contact us using the details in section 14.
1. Who we are
The Service is operated by Alumni Assets Limited, a company registered in Nigeria (RC: 9075155), Okoi Arikpo House, 5 Idowu Taylor Street, Victoria Island, Lagos, Nigeria, (Alumni Assets, we, us). Alumni Assets is responsible for your personal data under the Nigeria Data Protection Act 2023.
The Service is built, hosted and maintained on our behalf by our technology partner, Aeonian Technology. Aeonian processes personal data only on our instructions and does not use it for its own purposes.
Each organization on the Service (for example, an alumni association) manages its own members. The organization's administrators also make decisions about your information within their organization, such as approving your membership, assigning your tier and recording fees. Questions about how your organization uses your information can go to your organization or to us.
2. Information we collect
Information you give us
| Type | Examples |
|---|---|
| Account details | First and last name, email address, phone number, date of birth and password (stored in encrypted form; we never see it). |
| Tax information | Your Tax ID or registration number. We need it to apply and report withholding tax correctly. |
| Profile | Profile photo, and the display name you choose if you join an Honor Roll. |
| Membership | The organizations you join or leave, join and exit requests, membership tier, roles (such as Board Member), and membership fee status. |
| Preferences | Statement email preferences, Honor Roll opt-in, and notification settings. |
| Support | Messages you send through support requests and the details you include. |
Information created when you use the Service
| Type | Examples |
|---|---|
| Contributions and payments | One-time and recurring contributions, pledges, membership fee payments, ticket purchases, refunds, amounts, currencies, exchange rates applied, dates and payment references. |
| Fund records | Your share of each fund, distributions, withholding tax applied, amounts held, withdrawals and account statements. |
| Governance and events | Votes you cast, meetings you are invited to, documents you can access, events you RSVP to and tickets you hold. |
| Consent records | When you accepted these Terms and this Privacy Policy, and which version. |
| Technical information | Device type, operating system, app version, IP address, login times and error logs, used to keep the Service secure and working. |
Information we receive from others
- Payment providers confirm whether a payment succeeded and give us a payment reference. They do not share your full card or bank details with us.
- Your organization may add or update your membership details, tier, roles and offline fee payments.
What we do not collect: we do not store your full card number or card security code, and the mobile app does not track your location.
3. How we use your information
| Purpose | Legal basis under the NDPA |
|---|---|
| Create and secure your account, and let you join organizations | To perform our contract with you |
| Process contributions, pledges, fees, tickets and refunds | To perform our contract with you |
| Calculate fund values, your share, distributions and withdrawals | To perform our contract with you |
| Apply, remit and report withholding tax | Legal obligation |
| Verify identity and prevent fraud and money laundering (KYC/AML) | Legal obligation |
| Send account statements, receipts and service messages | To perform our contract with you |
| Run organization governance: votes, meetings, documents, events | To perform our contract with you |
| Send birthday messages and list you on an Honor Roll | Your consent (Honor Roll is opt-in) and our legitimate interest in recognizing members |
| Keep audit records of approvals, votes and financial changes | Legal obligation and legitimate interest in preventing misuse |
| Fix problems and improve the Service | Legitimate interest |
We do not sell your personal data, and we do not use it for third-party advertising.
4. Who we share your information with
We share only what each party needs:
- Your organization's administrators see your membership details, contributions, pledges and fee status for that organization only. Organizations cannot see your activity in other organizations.
- Other members may see your name in a meeting attendee list, and on an Honor Roll only if you opt in. Vote results are shown as totals.
- Payment providers: Paystack and Flutterwave (for payments in Naira, US dollars, Canadian dollars and/or British pounds) and OMNI/Nuvei (for payments in US dollars, Canadian dollars and/or British pounds). They process your payment under their own privacy policies.
- Banks that send and receive contributions, distributions and withdrawals.
- Our technology providers: Aeonian Technology, its software development partner(s), and our cloud hosting and email providers, under written confidentiality and data protection terms.
- Tax authorities and regulators, including the Nigerian tax authorities and the Securities and Exchange Commission, when the law requires it.
- Law enforcement or courts, when we are legally required to respond.
- Professional advisers such as auditors, accountants and lawyers, under confidentiality.
- A buyer or successor if Alumni Assets is reorganized, merged or sold, with this Policy continuing to apply.
5. International transfers
Your information is hosted on Amazon AWS, Africa/USA. Our technology provider and its development partner are based in Canada, the United States and Pakistan and may access data to support the Service. When data leaves Nigeria, we protect it as the Nigeria Data Protection Act requires, for example through contractual safeguards.
6. How long we keep your information
| Information | How long we keep it |
|---|---|
| Account and profile details | While your account is active, then 1 year after it closes |
| Contribution, payment, distribution, tax and withdrawal records | At least 6 years after the transaction, or longer if tax, financial or anti-money-laundering law requires |
| Records held back when a member or organization exits | Until the related tax year is reconciled, then as above |
| Votes and approval audit records | For as long as the organization uses the Service, then 2 years |
| Support conversations | 1 year after the request is closed |
| Technical logs | 12 months |
| Honor Roll listing and statement preferences | Until you change them or leave the organization |
When we no longer need information, we delete it or remove anything that identifies you.
7. How we protect your information
We use encryption in transit and at rest, role-based access so staff see only what their role needs, multi-step approvals for money leaving an organization, and audit records of sensitive actions. No system is perfectly secure, so please keep your password private and tell us straight away if you think your account has been misused.
8. Cookies
Our website and web platform use essential cookies to keep you signed in and keep the Service secure. You can block cookies in your browser, but some parts of the Service may not work.
9. Age
The Service is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has created an account, contact us and we will remove it.
10. Your rights
Under the Nigeria Data Protection Act 2023, and similar laws where you live, you can:
- access a copy of your personal data;
- correct information that is wrong or incomplete (you can update most details yourself in Edit profile);
- ask us to delete your data, subject to records we must keep by law;
- object to or restrict some uses of your data;
- receive your data in a commonly used format;
- withdraw consent at any time, for example by leaving the Honor Roll; and
- complain to the Nigeria Data Protection Commission (NDPC).
To leave an organization, go to the Membership page and select Leave Organization. Closing your account does not cancel amounts held back for tax until they are settled.
We respond to requests within 30 days. We may ask you to confirm your identity first.
11. Communications
We send service messages you cannot switch off while you have an account, such as receipts, security alerts and approval notices. You can choose whether account statements are emailed to you as PDFs, or whether you only receive an alert when a new statement is ready.
12. Links to other services
Payment pages from Paystack, Flutterwave and OMNI, and any other linked sites, are run by those companies under their own privacy policies.
13. Changes to this Policy
If we make an important change, we will tell you by email or in the app before it takes effect, and ask you to accept it again where the law requires. The version and effective date are shown at the top of this page.
14. Contact us
Officer: Abdul SADIKU
Email: sayhello@aeoniantechnology.com
Address: Okoi Arikpo House, 5 Idowu Taylor Street, Victoria Island, Lagos, Nigeria.