Privacy Policy

Last Updated: October 2026

AutoCSAT ("we," "us," or "our") respects your privacy and is committed to protecting the personal and corporate data you share with us. This Privacy Policy describes how we collect, use, and share data in connection with the AutoCSAT platform.

1. Information We Collect

We collect information necessary to provide enterprise-grade compliance tracking:

  • Account Information: Name, business email, phone number, role, and organization details when you register.
  • Assessment Data: Information entered into the platform for CSAT assessments, including policies, answers, and supporting evidence files.
  • Signal Feed Data: Automated metadata and counts securely pushed from your internal tools (e.g., SIEM, IAM) to our API. We do not ingest raw PII or sensitive payload contents.
  • Usage Logs: System interaction logs, IP addresses, and session information for security auditing and OTP approvals.

2. How We Use It

Your data is used strictly for the operation and improvement of the platform:

  • To provide, maintain, and secure the AutoCSAT application.
  • To generate CBN CSAT-aligned reports, PDF board packs, and export files.
  • To process secure OTP signatures and workflow approvals.
  • To send critical system alerts and compliance notifications.

3. Data Retention

Assessment data and evidence are retained to facilitate year-on-year historical comparisons, as required by standard banking compliance practices. If you terminate your subscription, we will securely delete your tenant data within 30 days of the request, subject to any legal retention requirements.

4. Third-Party Subprocessors

We do not sell your data. We use trusted third-party subprocessors to host and operate the platform:

  • Cloud Hosting: Secure, isolated tenant databases hosted in Nigeria-compliant infrastructure regions.
  • Cloudinary: For secure processing and storage of evidence attachments and exported PDFs.
  • Email Providers: For delivering OTP codes and system alerts.

5. Your Rights under NDPA

Under the Nigeria Data Protection Act (NDPA), you have the right to access, rectify, or request deletion of your personal data. You may also withdraw consent where applicable. To exercise these rights, please contact our Data Protection Officer.

6. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact us at:
Email: privacy@autocsat.org
Address: Lagos, Nigeria