AdunniTrak Logo

Privacy Policy

Effective date: January 1, 2026 | Last updated: September 22, 2026

This Privacy Policy explains how AdunniTrak handles Personal Data through the public website, web application, customer onboarding, support, sales, security, and Adunni AI features. It applies to website visitors, customer representatives, Authorized Users, and people whose Personal Data a Customer places in the Services.

Our privacy roles

For account, billing, sales, website, security, and direct support information, the relevant AdunniTrak company generally acts as the data controller. For Personal Data submitted to a Customer environment, the Customer generally determines the purposes and means of processing, and AdunniTrak processes the data for the Customer as a service provider or data processor.

Personal Data we collect

We collect data directly via the web application, APIs, cookies, customer administrators, and connected systems. This includes:

  • Account and contact data: Name, business email, telephone number, employer, job title, user role, and communication preferences.
  • Commercial data: Plan, quotation, contract, invoices, and transaction references. Payment card details are tokenized directly by our payment gateways (Stripe/Paystack) and are never stored on our servers.
  • Customer Data: Shift records, employee or contractor identifiers, production and downtime entries, work orders, inspection records, attachments, and audit history.
  • Technical and usage data: IP address, device and browser details, timestamps, authentication events, cookie identifiers, and approximate location.
  • AI interaction data: Prompts, retrieved context, generated responses, and related logs when Adunni AI is used.

Users must not enter special-category, sensitive, medical, biometric, financial-account, government-identifier, or children’s data unless the Customer has confirmed a lawful need and appropriate safeguards.

Adunni AI and automated processing

Adunni AI assists users by processing prompts and authorized Customer Data. User prompts and authorized operational context are transmitted securely via TLS 1.2+ to our enterprise AI providers (e.g., OpenAI/Anthropic). It is not intended to make final decisions about individuals, employment, safety, discipline, or legal rights. We do not knowingly use solely automated processing to make a decision that produces legal or similarly significant effects on an individual. Customers must provide appropriate notice and human review when they use AI-assisted output. AI providers are contractually prohibited from using Customer Data or prompts to train their general-purpose models.

Sharing, disclosure, and international transfers

We do not sell Personal Data. We may disclose it to authorized affiliates; vetted providers of hosting (AWS/Google Cloud), authentication, communications (SendGrid), payments (Stripe/Paystack), and AI processing. Providers may use Personal Data only for contracted purposes under appropriate Data Processing Agreements (DPAs).

The Services may involve processing in Canada, Nigeria, the United States, and other countries where approved providers operate. For transfers from Nigeria or another jurisdiction that restricts international transfers, we will use a lawful transfer mechanism and assess or require an adequate level of protection, contractual safeguards, or consent where valid.

Retention, security, and breaches

We retain Personal Data only as long as reasonably necessary for the subscription term, legal obligations, and backups. After termination, Customer Data is held for a 30-day export window, after which it is deleted or de-identified from active systems. Backup copies rotate on a 90-day cycle.

We use administrative, technical, and physical safeguards proportionate to the risk, including access controls, authentication, encryption in transit/rest, and logical environment separation. AdunniTrak will record and investigate a reported incident, contain it, and notify affected Customers and regulators within 48 hours where required by law.

Individual rights

Depending on location, an individual may request access, correction, deletion, restriction, portability, or withdrawal of consent. For Customer-controlled data, submit the request to the relevant Customer first. AdunniTrak will ordinarily respond within 30 calendar days to direct requests. AdunniTrak will assess whether AdunniTrak Solutions Nigeria Limited must register as a data controller/processor of major importance and appoint a qualified DPO.

Contact

Privacy requests, complaints, and suspected privacy or security breaches may be sent to admin@adunnitrak.com. Agboola Shonekan coordinates privacy matters for AdunniTrak Solutions Inc. and AdunniTrak Solutions Nigeria Limited.