Security and privacy

Your adverts and plans stay yours.

What we handle, how long we keep it and who can see it. In plain words, with the legal terms on the legal pages.

Data processing terms Privacy notice

7 days

Raw audio is kept for 7 days, then deleted.

About 13 months

Short clips around detections are kept, so reports stay checkable.

72 hours

Notice to the Nigeria Data Protection Commission after we become aware of a breach that puts people at risk.

Security, 1 of 6

What data we handle

Recordings of public radio streams, kept as one-minute pieces.
Your adverts, scripts, media plans and the reports made from them.
Short audio clips around each detection, used as evidence.
Transcripts of speech on air. Callers and guests can be heard on radio, so transcripts can contain personal data.
Account details for your team: name, work email, role.

Security, 2 of 6

How long we keep it

Raw audio is kept for 7 days, then deleted.
Clips around detections are kept for about 13 months, so reports stay checkable.
Your adverts, plans and reports are kept while your account is active, and deleted on request after you leave.

Security, 3 of 6

Client confidentiality

Your adverts, plans and results belong to you. Every query is limited to your own organisation.
Adverts that Spotledger finds on its own come only from audio and transcripts. We never copy a client's advert names, campaigns or plans into them.
Team roles (viewer, analyst, planner and owner) control who can view, review, change plans and manage the team.
The demo workspace is read-only.
Every change in your workspace is written to an audit log that your owner can read.

Security, 4 of 6

Sign in and reports

You sign in with an email and a password. Passwords are stored as salted scrypt hashes, never in plain text, and repeated failed sign ins are rate limited.
Sessions use a signed cookie, and the server keeps only a hash of each session token.
Every report prints a SHA-256 fingerprint of its own contents in the footer, so any change to it can be detected.
Staff reviewers see only what a review needs, and their decisions are logged.
Secrets are read from the environment, never stored in code.

Security, 5 of 6

Station audio and disputes

You can always play the adverts you upload. Station recordings play for Spotledger staff only until each station gives written permission. Until then every airing shows its time, source, score and the seconds that played, and the report lists them. One airing is shown in full, with its waveform and the matched seconds, on the home page.
Any status can be disputed from the report line or the detection page.
A person reviews each dispute and the outcome is recorded.
We say Not detected in a fully monitored window, never that a station did not air a spot, and we always show the minutes we were listening.

Security, 6 of 6

Nigeria Data Protection Act 2023

We process personal data under the Nigeria Data Protection Act 2023 and follow its principles: purpose, minimisation, limited retention and security.
If a breach puts people at risk, we tell the Nigeria Data Protection Commission within 72 hours of becoming aware, and affected clients without delay.
Data processing terms are provided on request. The draft is on the legal pages.

Other services

What is sent elsewhere.

Language work uses transcript text

When Spotledger AI names a brand or writes a Morning Brief, it is sent transcript text only, never audio.

Speech to text receives audio

Turning speech into text works on the audio itself. Ask us which speech service and region a workspace uses.

Transfers outside Nigeria

The Nigeria Data Protection Act 2023 requires a legal basis for cross-border transfers. Ask us for the services that handle data outside Nigeria and the basis for each.

Questions

Security questions from your IT or legal team.

Send them through the demo form. A person answers each one. Our data processing terms are on the legal pages.

See what really aired on your campaigns.

Free for 30 days. No card and no approval needed.

Get started Book a demo