Who we are
Authnet Networks and Internet Technologies (Authnet) is a product operated by Byteforge Technologies Ltd, based in Minna, Nigeria. References to Authnet, we, us and our mean Byteforge Technologies Ltd in its operation of this product. Contact us at support@authnetworks.com.
A business using Authnet to manage its Wi-Fi network is referred to as the network operator. Its identity and contact details should be shown in its customer portal, receipts or service information. The network operator may be a separate organisation from Byteforge Technologies Ltd.
Business and administrator information
Records can include administrator names, email addresses, phone numbers, account and security identifiers, business identity, location and contact details, branding, verification documents where supplied, administrator roles, router and network configuration, operational telemetry, support correspondence and audit records.
Payment administration can involve bank and payout account details, account-holder names, payment and settlement references, fees, balances, disputes and records needed to investigate payment issues. The categories depend on the features you use. Customer information handled through your business is described in the Wi-Fi customer privacy notice.
Your customers and our processing role
For your administrator account and our own platform administration, Byteforge Technologies Ltd determines the relevant processing purposes. For customer information handled to run your network through Authnet, you generally determine the purposes and Authnet generally supplies processing services on your instructions. Some activities, including our own security and legal compliance, involve our independent responsibilities.
You must provide your customers with an accurate notice, establish an appropriate lawful basis, authorise only necessary access, handle rights requests and ensure instructions are lawful. Giving us customer information is not a substitute for meeting those duties. Processing arrangements should cover instructions, confidentiality, security, providers, international transfers, incident assistance, rights requests and return or deletion when services end. Contact us to arrange the applicable data-processing agreement; this notice alone is not that agreement.
Why information is processed
Information is used to create and secure accounts, authenticate network access, deliver purchased plans, record usage, reconcile payments, administer settlements, provide support, investigate misuse and meet applicable legal requirements. We use contract-related processing where necessary to provide a service you request; legal obligation where a law requires processing; and legitimate interests for proportionate security, fraud prevention and service administration, subject to your rights.
Where consent is the appropriate basis, including for optional uses that require it, it must be a separate, informed choice. Reading this notice, accepting service terms or continuing to browse is not blanket consent to every use of personal information. Withdrawing consent does not affect processing already carried out lawfully or processing supported by another lawful basis.
Sign-in and device information
Accounts can use supported password, verification-code, Google sign-in or passkey features. Google sign-in supplies the account information needed for authentication, such as your email, name and Google account identifier. This does not give us general access to your contacts or social media activity.
For passkeys we store credential identifiers, public keys, device labels and related security metadata. Your device or passkey provider manages the private key and any fingerprint or face verification; Authnet does not receive that biometric template from the passkey ceremony. Authenticator setup involves storing a secret used to check one-time codes. Keep passwords, setup keys, recovery codes and payment credentials private.
Cookies, local storage and analytics
The platform uses browser cookies and device storage for sessions, security, remembered sign-in choices, device credentials and interface preferences. Clearing this storage can sign you out or remove remembered settings. Essential storage is needed for requested account and security functions.
The website offers optional Google Analytics when configured. Analytics loads only after you accept it using the analytics control; rejecting it does not prevent account use. It can process page interactions, browser and device information and related identifiers under Google's practices. It is distinct from Wi-Fi usage accounting and from accepting service terms. Use Cookie settings on your account page to review or withdraw the analytics choice for that browser and site. Choices are stored per browser and hostname. Contact us about other marketing choices. Your browser can also restrict storage, although this may affect some features. We do not treat a terms checkbox as permission for optional tracking.
How long information is kept
Retention depends on the record and purpose. Account details are kept while needed to administer the account; connection and security records while needed for operations, incident investigation and disputes; and payment and settlement records while needed for reconciliation, accounting and applicable legal obligations. Support and complaint records may need to remain after an account closes. Temporary verification and authentication records have separate expiry controls.
A request to close an account does not necessarily erase outstanding transaction, complaint, fraud or legally required records. Where information is no longer needed for a lawful purpose, it should be deleted or anonymised, including through the applicable backup lifecycle. Contact us for the retention criteria applicable to a particular record and network operator. We do not promise a single deletion period for all categories.
Security and international processing
Access controls, authentication and other technical and organisational measures are used to protect information. No online service can guarantee complete security. Report suspected compromise promptly to support@authnetworks.com and, for a Wi-Fi account, to your network operator.
Our application and API servers are hosted by DigitalOcean in Amsterdam, Netherlands (AMS3). Our database is hosted through MongoDB Atlas on Amazon Web Services in Northern Virginia, United States (us-east-1). Hosting, authentication, payment and communications providers may process information outside Nigeria, including through support or subprocessors. Such transfers must have an applicable legal basis and appropriate safeguards under Nigerian data protection law. Use of this service alone is not consent to an international transfer. Ask us for the destinations and safeguards relevant to your information.
Your choices, requests and complaints
Subject to applicable law, you may request access, correction, erasure, restriction or portability of your information, object to relevant processing including direct marketing, and withdraw consent where processing relies on it. You may also request human review of a solely automated decision that has a legally or similarly significant effect, where applicable. Network rules can automatically expire a plan, enforce a usage limit or deny access; contact the operator to contest a result.
Send requests to support@authnetworks.com with the relevant business or network name and enough information to identify the account. We may need proportionate identity verification. Do not send your password, authenticator setup key or full payment-card details. For operator-controlled records, we may direct the request to the operator and assist it as appropriate. We will explain any lawful limits or records that must be retained.
You may complain to the Nigeria Data Protection Commission at ndpc.gov.ng. Contacting us first can help resolve an issue, but does not remove your right to approach the Commission or seek another lawful remedy.
Children and people needing assistance
A Wi-Fi service may be used in schools, homes and other settings where children are present. The network operator must apply the safeguards and parental or guardian involvement required for its users and processing purposes. Where consent from a parent or guardian is legally required, an ordinary signup or continued use does not replace it. Contact us if you believe a child's information has been handled improperly. Business administration is intended for people with authority and legal capacity to represent the business.
Changes and contact
We will identify revisions with an updated date and use appropriate notices for material changes. A new purpose requiring consent needs a new choice; a notice update does not supply that consent. This notice explains privacy practices and is separate from service terms. Questions and requests: support@authnetworks.com, Byteforge Technologies Ltd, Minna, Nigeria.