Privacy notice

In force from 7 October 2026

Who is responsible for your information

AOSA Innovations ("Isoponet", "we") decides how your information is used, so under the Nigeria Data Protection Act 2023 we are the data controller. Contact: support@isopo.net. Registration with the Nigeria Data Protection Commission (NDPC): not yet registered.

The short version

  • We keep your name and phone number, your payments, and a record of each time your devices were online: when, for how long, and how much data.
  • We do not record which websites or apps you use, or anything you send or receive.
  • We keep the record of who was online because Nigerian rules for internet providers require a connection to be traceable to a person, a device and a time.
  • This website sets no cookies and has no trackers.

What we keep, and why

Who you are
Your name, phone number and login name, and the label for your place (for example a room). We use them to set up your service and to reach you about it.
Your WiFi code
It lets the network check it is you. It is shown to you once and never again on any screen. Our staff can make you a new one but cannot look yours up.
Your devices
Each device's network (MAC) address and the name it announces, which is often its owner's name, such as "Ada's iPhone". We use them to count the devices on your plan and to trace a connection to a device.
When you were online
For each session: your login, the device, the address it used inside our network and the public address and ports it used on the internet, when it started and stopped, and the data used. We keep this to give you the service, to apply your plan's data allowance, and because the law requires it.
Sign-in attempts
Whether each attempt to sign in worked, and when. We use them to keep the network secure.
Your payments
The amount, the method, the reference, the sender's name as the bank gave it, who confirmed it and when, and every movement in your wallet. We keep them to run your account and to keep accounts.
Messages to us
Anything you send to support, and our replies, so we can help you and remember what was agreed.
Changes in our system
A log of who changed what and when, for example that a payment was confirmed or a code was reset. It is how we show that records were not changed behind anyone's back.

We do not keep copies or numbers of identity documents. We do not track where you are. We do not record web addresses, DNS lookups or the content of anything you do online.

Why we are allowed to

This notice is written under the Nigeria Data Protection Act 2023, which lets us use your information for these reasons:

  • To give you the service you pay for (a contract with you): your details, devices, payments and sessions.
  • Because the law requires it: the record of which person and device used the network, and when.
  • To keep the network and your account secure (our legitimate interest): sign-in attempts and the log of changes.

Who sees it

  • Our staff. The caretaker at the site sees names, phone numbers, devices, payments and sessions, so they can help you. Only the owner of Isoponet can look up who used an internet address at a given time, and every such lookup is recorded.
  • Authorities. We give information to law enforcement or a regulator only on a lawful request: a written request on the agency's letterhead that names the internet address, the port and the time. If a request is about the content of what someone did online, we need a court order, and we hold no content anyway.
  • Companies that help us run the service. Cloudflare hosts this website and forwards the email sent to support@isopo.net, so it handles the technical details of a visit (such as the visitor's IP address) and the emails themselves. A storage company holds our encrypted backups (see "Where it is kept"). The caretaker may remind you by WhatsApp or SMS that your plan is ending, which means that service carries your phone number and the message.
  • We do not sell your information or use it for advertising.

Where it is kept

Your records are kept on our own server at the site. Backups are encrypted, stored with Backblaze in the United States. They are encrypted with a key only Isoponet holds, so the storage company holds data it cannot read. A backup outside Nigeria is a transfer of data abroad, and we protect it in this way.

How long we keep it

  • Session and identity records (sessions, sign-in attempts, which device held which address, and your name and phone number after you leave): 2 years. After that, the records are removed, and a person's name, phone number and device names are blanked and replaced by a note that they were removed under this policy.
  • Payments and wallet records: 6 years.
  • The log of changes cannot be altered once written, so it keeps the name and phone number entered when your account was made, for as long as the log exists.
  • Backups age out on the same schedule, so a record we have removed can stay in an older backup for a short time.
  • Messages to support are kept for as long as they help us deal with your question.

Your rights

Under the Nigeria Data Protection Act 2023 you can ask us to:

  • tell you what we hold about you, and give you a copy;
  • correct anything that is wrong;
  • delete your information when we no longer need it. Records the law requires us to keep stay until their period ends;
  • limit how we use it, or stop using it for something you object to;
  • give it to you in a form you can take elsewhere.

How to ask. Email support@isopo.net, or ask at the site, and say which of these you want. We may need to check it is you before we share anything. We reply within 30 days.

If you are not happy. You can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

Keeping it safe

Staff see only what their job needs. Every change and every lookup of who used an address is recorded. Backups are encrypted. If a breach puts your rights at risk, we will tell the NDPC within 72 hours of knowing, and tell you without delay when the risk to you is high.

This website

This website sets no cookies, runs no analytics and loads nothing from other companies: the fonts and images are our own. Our hosting company, Cloudflare, handles each request to deliver the page, which includes the visitor's IP address, and keeps technical logs for security.

Changes to this notice

If we change this notice, the new version goes on this page with its date. If a change matters to you, we will tell you at the site as well.