Privacy Policy

Who this covers

Anty Virtual LLC (“Anty Virtual”, “we”) runs Anty Voice, Anty Cards, Anty Connect, Anty Food, Anty Loyalty. Three kinds of people appear in them:

A business using Anty Virtual (a restaurant, a tax office, a clinic, a salon): the client. The business is the controller of its customers’ data. We are its processor and act on its instructions, under a data processing agreement.
A customer of that business: someone who calls it, messages it, orders from it, taps its review card or joins its rewards. Your data belongs to the business you dealt with. We hold it for them and do nothing else with it.
A courier or field agent working with us, and our own staff: here Anty Virtual is the controller.

What we collect, and why

From a business (the client)

Account and contact details: the business name, address, the people who sign in and their email addresses, the phone numbers and calendars the business connects. So we can run the service and reach the business.
What the assistant is told to say: opening hours, services and prices, the knowledge base. So the assistant answers correctly.
Connected accounts: a WhatsApp or Instagram account, a Google Calendar, a payment processor. We keep a connection token, encrypted, never a password.
Billing: the plan, the invoices, the card on file with our billing processor. We never see a full card number.
For Anty Food: the menu, the orders, settlements to the restaurant’s own bank account. Money goes to the restaurant’s account through Monnify; it never sits with us.

From a business’s customers

On a call to the business (Anty Voice): the caller’s number, what they say, an appointment or a message they leave, and a recording and transcript of the call. Callers are told the call is recorded where the law requires it, and a business can switch recording off.
In a message to the business (Anty Connect, Anty Food): the message, the number or handle it came from, and any booking or order it led to.
On an order (Anty Food): name, phone number, delivery address, what was ordered, payment status from Monnify (never card details: those go to Monnify directly), and the delivery’s progress.
On a review card (Anty Cards): the face tapped, any private feedback typed, and a name, phone or email if the customer chooses to leave one for a follow-up. We record that a review link was shown; we never read or hold the review itself.
In a rewards programme (Anty Loyalty): the phone number the programme is keyed on, visits and points.

From couriers and field staff

Name, phone, bank account for payouts (encrypted), a National Identification Number for the identity check (encrypted), an identity photograph taken by Smile Identity’s own screen (we keep the result, not the image), a photo of the courier for customers to recognise them, their position while carrying an order, and the record of each delivery. See the identity section.

From everyone

Sign-in records: when a person signed in and from which address, kept for security.
A session cookie so a tap on a card is counted once, and the cookies that keep a signed-in person signed in. Nothing for advertising.

How long we keep it

Call recordings: 90 days by default, then deleted here and at the voice provider. Transcripts: 365 days by default. A business sets its own periods (between 7 days and ten years) under Settings. The call record itself (who, when, how long, a one-line summary) stays as the business’s record. Detail on the retention page.
Orders, bookings, messages, feedback, rewards: for as long as the business is a client, because they are the business’s records. Deleted when the business asks, or when its account is closed and it asks for deletion.
Courier identity and bank details: for as long as the courier works with us plus seven years, the period Nigerian tax and payment records must be kept.
Courier positions: purged on a rolling basis once a delivery is complete and its record settled.
Sign-in records and the audit log: kept, because they are the record of who did what.
Backups: a deleted item survives in backups for up to seven days, then is gone. Nothing is restored from a backup except to recover from a failure, and then the deletion is re-applied.

Who can reach it

The business sees its own data and nobody else’s. Every read and write is scoped to the signed-in business.
At Anty Virtual: the owner, and staff holding a specific capability (restaurants, couriers, rider operations), granted by the owner and re-checked on every request. A staff member can open a business’s dashboard as that business only through a signed, four-hour, audited “view as” session; the business sees a banner on every page while it is on.
A courier sees the name, phone and address on the one order they have accepted, until it is delivered.
Suppliers see what their part needs and nothing more; each is listed on the sub-processor page with what it receives.

Every sign-in and every change to money, identity and settings is written to an audit log with who and from where. Reads are not logged today; the Security page says so.

Only the suppliers that do a part of the job (the voice provider, the language model, the database and hosting, email, SMS, payments, messaging, identity verification), each under terms that limit them to that part. The full list, with what each receives and where, is published, and we give fourteen days’ notice before adding one. We do not sell data, rent it, or use it to market to a business’s customers on our own account. We disclose data to authorities only where the law requires it, and we tell the business unless the law forbids it.

Review requests go to every customer on the same terms. We never withhold a review link because of what somebody is likely to say.

No model is trained on your data, ours or a supplier’s: the terms that back that.

If you are verifying your identity

Couriers and people in business development are asked for a National Identification Number and a photograph, because both represent us unsupervised and are paid money that is hard to recover, so we need to know who they are.

The head movements are checked on your phone. Four quick movements show a real person is there, not a picture of one. Nothing from that step leaves your phone: no video and no still frames. We record only whether it passed or failed, when, and how clearly your face was seen.
Your photo and NIN go straight to Smile Identity, the licensed verification service that performs the check, through its own capture screen. We never receive a copy of your photo and we do not keep one. Smile holds it under its own terms as the verifier.
What we keep is the outcome: whether the NIN verified, whether the photo matched, a match score, and the reference number of the check. Not the images, and not links to them: Smile’s links to your photo and to the photo on your NIN record are removed before anything is saved.
Your NIN and bank account number are stored encrypted, so a copy of our database on its own does not reveal them. We keep them so a duplicate application can be spotted and so you can be paid, for as long as you work with us plus seven years.
You can refuse. If you would rather not be checked this way, tell us and a person will verify you another way. It is slower; it is not a dead end.

Lawful bases

Contract: running the service a business signed up for, and paying a courier for a delivery.
The business’s instructions: everything we do with a business’s customers’ data, as its processor.
Consent: the identity check on a courier or field agent, and a customer’s request to be called back after leaving feedback.
Legitimate interests: security logging, fraud prevention, and keeping the platform running.
Legal obligation: tax and payment records, and anything a competent authority lawfully requires.

For people in Nigeria this is the Nigeria Data Protection Act 2023; for people in the European Union or United Kingdom, the GDPR and UK GDPR; for people in the United States, the state privacy laws that apply to them.

Your rights

You can ask for a copy of what we hold about you, have it corrected, have it deleted, take it with you in a usable form, or object to a use of it. Write to privacy@antyvirtual.com; we answer within 30 days. If your data is held for a business as its processor, we will pass the request to that business and help it answer, unless you tell us not to. The full description of each right and how to use it.

Cookies

A session cookie (so a tap on a review card is counted once and a customer is not asked the same thing twice), and the cookies that keep a signed-in person signed in. No advertising cookies, no cross-site tracking.

Where it goes

The platform and its database are in the United States (the regions are on the location page). Payments for Nigerian restaurants are processed in Nigeria by Monnify. Data of people in Nigeria therefore leaves Nigeria; the business that is the controller relies on its contract with us, and this policy, as the basis for that transfer under the Nigeria Data Protection Act. Data of people in the EU or UK is transferred on the standard contractual clauses in our DPA.

Changes and contact

When this policy changes, the date at the top changes and a business with an account is told by email. Questions and requests: privacy@antyvirtual.com. Anty Virtual LLC, Phoenix, Arizona, United States, +1 844 439 2689.