Privacy Policy

Effective date: June 18, 2026  ·  Last updated: June 18, 2026  ·  Replaces all previous versions

This Privacy Policy explains how Affitrage Ltd ("we", "us") collects, uses, stores, shares, and protects personal data through the AADOPS platform. It complies with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023. By registering or using the Platform, you consent to the practices described here.

1.  Data Controller

Affitrage Ltd · Port Harcourt, Rivers State, Nigeria · support@aadops.com

2.  Data We Collect

2.1 Registration Data

Business name, full name, email address, password (stored as a bcrypt cryptographic hash — never in plain text), and business type.

2.2 Business Profile Data

Store name, farm name, organisation name, location (state and LGA), bank name, account number, and account name for disbursements.

2.3 Verification Data (KYC/KYB)

For users accessing marketplace selling, AAD Partner Programme, or Support Agent status: NIN (individuals); CAC number, business documents, and director information (businesses). Processed through Prembly Identity Solutions under a data processing agreement.

2.4 Financial and Transaction Data

Wallet top-up amounts and Flutterwave transaction references; subscription and addon payment history; marketplace order values and escrow records; AAD bid amounts, earnest deposits, locked balances, allotment records, pool distribution amounts, and exchange transaction records; agent commission and support agent fee records; referral reward records.

2.5 Operational Business Data

All business records you create — inventory, products, sales, purchases, crop cycles, harvest batches, farm inputs, offtake agreements, livestock herds, livestock events, feed logs, health records, production orders, bills of materials, finished goods records, consumption records, delivery requests, shipment records, marketplace listings, RFQs, and orders. This data is your property. Affitrage Ltd processes it solely to provide the Platform service.

2.6 Agent and Session Data

Agent profile data, assignment scope records, session records (type, description, modules accessed, duration), commission and fee transaction records.

2.7 Support and Communication Data

Support ticket content, messages, attachments, AI-generated responses where applicable, ticket metadata (current route, browser, plan at creation, active modules), and email correspondence with support@aadops.com.

2.8 Usage and Technical Data

IP address, browser type and version, operating system, pages visited, features used, session timestamps, and error logs. Collected automatically.

3.  How We Use Your Data

4.  Third Parties We Share Data With

We do not sell your personal data. We share data only as follows:

All third parties processing data on our behalf do so under data processing agreements requiring NDPR and NDPA compliance.

5.  Data Storage and Security

• All passwords stored as bcrypt hashes — plain text passwords are never stored or transmitted
• All data in transit encrypted via HTTPS/TLS
• Verification documents in private S3 buckets with restricted access
• Role-based access controls — staff accounts access only data within their permission scope
• Tenant data isolation — all tables include tenant_id; no cross-tenant data access is possible through the application
• Regular security monitoring and incident response procedures

In the event of a personal data breach likely to result in risk to your rights, Affitrage Ltd will notify you and the Nigeria Data Protection Commission (NDPC) within the timeframes required by the NDPA 2023.

6.  Data Retention

After the applicable retention period, data is securely deleted or irreversibly anonymised.

7.  Your Rights Under the NDPR and NDPA

All requests: email support@aadops.com with subject "Data Rights Request". We respond within 30 days. We may verify your identity before processing. To lodge a complaint: ndpc.gov.ng.

8.  Cookies

AADOPS uses session cookies and an authentication cookie (authToken) to maintain your logged-in state. These are strictly functional — they are necessary for the Platform to operate. We do not use tracking, advertising, profiling, or cross-site cookies. No third-party advertising networks receive cookie data from AADOPS.

9.  Children's Privacy

AADOPS is intended exclusively for adults. We do not knowingly collect data from individuals under 18. If we become aware a minor has registered, we will promptly delete their data and close the account. Contact support@aadops.com if you believe a minor has registered.

10.  International Data Transfers

Some data may be processed on AWS infrastructure outside Nigeria (including the US and Europe). Where this occurs, Affitrage Ltd ensures adequate data protection safeguards through AWS standard contractual clauses. Prembly, GIG Logistics, Bolt, and UberDirect may also process data in their own jurisdictions under data processing agreements.

11.  Changes to This Policy

We notify you by email of material changes at least 14 days before they take effect. Minor updates take effect immediately with notice in the Platform. Continued use constitutes acceptance.

12.  Contact