1. Introduction & Scope
AuditAI Technologies Ltd. ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your corporate and personal data. This Privacy Policy outlines how we collect, use, process, and protect your information in accordance with the Nigeria Data Protection Act (NDPA) 2023 and the regulatory directives of the Nigeria Data Protection Commission (NDPC).
This policy applies to all users of the AuditAI platform, including SME owners, NGO administrators, and professional auditors utilizing our cloud infrastructure.
2. Data We Collect
To provide our AI-driven tax computation and auditing services, we collect the following categories of data:
- Account Information: Names, email addresses, phone numbers, and professional credentials (e.g., ICAN/ANAN membership numbers).
- Corporate Financial Data: General ledgers, trial balances, bank statements, and invoices uploaded to the platform.
- Statutory Identifiers: Tax Identification Numbers (TIN), Corporate Affairs Commission (CAC) Registration Numbers (RC).
- Usage & Telemetry Data: IP addresses, access timestamps, and audit trails of edits made to working papers.
3. Controller vs. Processor Roles
Under the NDPA, the distinction between a Data Controller and a Data Processor is strictly defined:
- AuditAI as a Data Controller: We are the Data Controller for your account registration details, billing information, and platform usage analytics.
- AuditAI as a Data Processor: For all financial ledgers, bank statements, and client portfolios uploaded by Audit Firms or SMEs, you remain the Data Controller. We process this data strictly to provide AI anomaly detection and tax computation services, per your instructions.
4. Data Residency & Transfer
AuditAI prioritizes Nigerian digital sovereignty. All core financial data and databases are hosted on enterprise-grade cloud infrastructure with localized instances. If technical infrastructure necessitates cross-border data transfer, it is done strictly within NDPA guidelines, utilizing standard contractual clauses approved by the Attorney General of the Federation.
6. Data Subject Rights (NDPA)
In compliance with Nigerian law, you possess the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Correct inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): Request deletion of your data, subject to our legal obligations to retain statutory financial records for the NRS or FRCN.
- Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
7. Contact the Data Protection Officer (DPO)
If you have questions about this policy, wish to exercise your data rights, or need to report a data breach, please contact our designated Data Protection Officer:
AuditAI Data Protection Officer
Email: dpo@auditai.com.ng
Address: AuditAI Technologies, Ikorodu, Lagos State, Nigeria.