Who we are
Authnet Networks and Internet Technologies (Authnet) is a product operated by Byteforge Technologies Ltd, based in Minna, Nigeria. References to Authnet, we, us and our mean Byteforge Technologies Ltd in its operation of this product. Contact us at support@authnetworks.com.
A business using Authnet to manage its Wi-Fi network is referred to as the network operator. Its identity and contact details should be shown in its customer portal, receipts or service information. The network operator may be a separate organisation from Byteforge Technologies Ltd.
Authnet and your network operator
Your network operator generally decides why customer account and connection information is collected for its Wi-Fi service and controls its plans, network access and customer support. Authnet generally processes that information to provide the operator's platform services on its instructions. Authnet also has its own responsibilities for processing it determines, such as platform security, its direct support interactions and applicable legal obligations. The actual role depends on the processing activity; neither party's responsibilities disappear because the other is involved.
This notice covers Authnet's involvement. Read your operator's own privacy notice for additional collection, local network monitoring or other uses it determines. Ask the operator to identify itself if that information is missing from the portal.
Registration, verification and age declaration
Self-service customer registration is limited to people who declare that they are 18 or older. We record that declaration, not a date of birth or an identity-document image in the standard registration flow. This is Authnet's service policy supporting child-data safeguards under Nigerian data protection rules; a declaration is not verified age and does not remove either party's legal responsibilities. People under 18 should ask a parent or guardian and the network operator for help with an appropriate arrangement, rather than make a false declaration.
Standard registration asks for a name, phone number and email address. We check formats and account conflicts but do not routinely establish a person's legal identity or verify the name and phone against official records. We encourage you to use an email address you control because it is used for receipts, recovery and ownership/support checks. Google sign-in verifies information through Google, and security-sensitive changes may require a password or email code. This approach limits routine identity collection; it does not promise that information can never need verification.
The registration screen explains the service processing, links to the customer terms and privacy notice, and records your age declaration, terms agreement, notice acknowledgement and request for necessary service processing with the server's date and document versions. These are separate from optional analytics consent. Existing customers can review the notice in account settings; an earlier acknowledgement is not fabricated for them.
Closing your customer account and retained operator records
You can request deletion of your own customer account in its privacy controls using your current account password and an explicit confirmation. If access or ownership verification is a practical problem, contact the network operator or support. This self-service control applies to Wi-Fi customer accounts, not business-owner or platform-staff accounts.
Deletion removes your original registration/profile name, email, phone and address fields, portal password, linked sign-in identifiers and account-bound authentication records. Unique synthetic identifiers and a pseudonymous account shell remain to preserve subscription and accounting relationships. Your portal sessions are revoked. Registering again creates a new account and does not automatically regain the old subscriptions. Deletion does not itself cancel or refund a purchased subscription or erase operator subscription, payment, connection or subsequent usage records.
Retained operator records may still be personal data, including device identifiers and transaction evidence. They are not the operator's unrestricted property: retention and use need an applicable lawful purpose, minimisation and retention limits, and remain subject to your rights. Contact the operator or Authnet about those records. Copies already held in backups are governed by backup retention and controlled restoration procedures rather than an assurance of immediate per-record removal from every historical copy.
We do not infer that you are a student, have graduated or want deletion from your venue, inactivity or an estimated active-user count. We do not automatically delete accounts because of graduation, holidays or inactivity.
Information involved in Wi-Fi service
Depending on the features used, records can include your name, email or phone number, account and authentication identifiers, verification status, business or network identifier, purchased plans, vouchers, subscription limits, transaction references, support messages and changes to your account.
Connection accounting can include IP and MAC addresses, device information, network or router identifiers, session start and stop times, last-seen times, upload and download volumes, data allowance and device limits. These records help authenticate access and apply the plan. They are different from the content of messages or pages you read. This notice does not promise that an independent network operator or upstream provider performs no additional monitoring; ask the operator about its practices.
Where advertising features are enabled, the platform also records ad impressions and clicks for performance reporting. Information given to an advertiser after following a link is subject to that advertiser's practices.
Why information is processed
Information is used to create and secure accounts, authenticate network access, deliver purchased plans, record usage, reconcile payments, administer settlements, provide support, investigate misuse and meet applicable legal requirements. We use contract-related processing where necessary to provide a service you request; legal obligation where a law requires processing; and legitimate interests for proportionate security, fraud prevention and service administration, subject to your rights.
Where consent is the appropriate basis, including for optional uses that require it, it must be a separate, informed choice. Reading this notice, accepting service terms or continuing to browse is not blanket consent to every use of personal information. Withdrawing consent does not affect processing already carried out lawfully or processing supported by another lawful basis.
Sign-in and device information
Accounts can use supported password, verification-code, Google sign-in or passkey features. Google sign-in supplies the account information needed for authentication, such as your email, name and Google account identifier. This does not give us general access to your contacts or social media activity.
For passkeys we store credential identifiers, public keys, device labels and related security metadata. Your device or passkey provider manages the private key and any fingerprint or face verification; Authnet does not receive that biometric template from the passkey ceremony. Authenticator setup involves storing a secret used to check one-time codes. Keep passwords, setup keys, recovery codes and payment credentials private.
Cookies, local storage and analytics
The platform uses browser cookies and device storage for sessions, security, remembered sign-in choices, device credentials and interface preferences. Clearing this storage can sign you out or remove remembered settings. Essential storage is needed for requested account and security functions.
The website offers optional Google Analytics when configured. Analytics loads only after you accept it using the analytics control; rejecting it does not prevent account use. It can process page interactions, browser and device information and related identifiers under Google's practices. It is distinct from Wi-Fi usage accounting and from accepting service terms. Use Cookie settings on your account page to review or withdraw the analytics choice for that browser and site. Choices are stored per browser and hostname. Contact us about other marketing choices. Your browser can also restrict storage, although this may affect some features. We do not treat a terms checkbox as permission for optional tracking.
How long information is kept
Retention depends on the record and purpose. Account details are kept while needed to administer the account; connection and security records while needed for operations, incident investigation and disputes; and payment and settlement records while needed for reconciliation, accounting and applicable legal obligations. Support and complaint records may need to remain after an account closes. Temporary verification and authentication records have separate expiry controls.
A request to close an account does not necessarily erase outstanding transaction, complaint, fraud or legally required records. Where information is no longer needed for a lawful purpose, it should be deleted or anonymised, including through the applicable backup lifecycle. Contact us for the retention criteria applicable to a particular record and network operator. We do not promise a single deletion period for all categories.
Security and international processing
Access controls, authentication and other technical and organisational measures are used to protect information. No online service can guarantee complete security. Report suspected compromise promptly to support@authnetworks.com and, for a Wi-Fi account, to your network operator.
Our application and API servers are hosted by DigitalOcean in Amsterdam, Netherlands (AMS3). Our database is hosted through MongoDB Atlas on Amazon Web Services in Northern Virginia, United States (us-east-1). Hosting, authentication, payment and communications providers may process information outside Nigeria, including through support or subprocessors. Such transfers must have an applicable legal basis and appropriate safeguards under Nigerian data protection law. Use of this service alone is not consent to an international transfer. Ask us for the destinations and safeguards relevant to your information.
Your choices, requests and complaints
Subject to applicable law, you may request access, correction, erasure, restriction or portability of your information, object to relevant processing including direct marketing, and withdraw consent where processing relies on it. You may also request human review of a solely automated decision that has a legally or similarly significant effect, where applicable. Network rules can automatically expire a plan, enforce a usage limit or deny access; contact the operator to contest a result.
Send requests to support@authnetworks.com with the relevant business or network name and enough information to identify the account. We may need proportionate identity verification. Do not send your password, authenticator setup key or full payment-card details. For operator-controlled records, we may direct the request to the operator and assist it as appropriate. We will explain any lawful limits or records that must be retained.
You may complain to the Nigeria Data Protection Commission at ndpc.gov.ng. Contacting us first can help resolve an issue, but does not remove your right to approach the Commission or seek another lawful remedy.
Children and people needing assistance
A Wi-Fi service may be used in schools, homes and other settings where children are present. The network operator must apply the safeguards and parental or guardian involvement required for its users and processing purposes. Where consent from a parent or guardian is legally required, an ordinary signup or continued use does not replace it. Contact us if you believe a child's information has been handled improperly. Business administration is intended for people with authority and legal capacity to represent the business.
Changes and contact
We will identify revisions with an updated date and use appropriate notices for material changes. A new purpose requiring consent needs a new choice; a notice update does not supply that consent. This notice explains privacy practices and is separate from service terms. Questions and requests: support@authnetworks.com, Byteforge Technologies Ltd, Minna, Nigeria.