1. Who We Are
Nigeria Airspace Analytics is a service operated by Trackwise Nigeria Limited ("we", "us", "our"), a company registered in the Federal Republic of Nigeria. For privacy enquiries contact us at privacy@adsbng.app.
2. Data We Collect
Individual subscribers
- Email address (required — used to deliver alerts and verification links)
- Name (optional — used for email personalisation)
- Telegram user ID and chat ID (if you subscribe via Telegram bot)
- Alert category preferences (e.g. VIP, Military, Emergency)
- Location preferences — Nigerian airspace zones you choose to monitor
- Subscription status, verification timestamp, and alert delivery history
Company subscribers
- Company name, business email, and phone number
- Billing information processed by Paystack (we do not store card details)
- Custom watchlists, geofence coordinates, and webhook endpoint URLs
- Team member names, emails, roles, and API key identifiers
- API usage logs (endpoints called, timestamps, response codes)
Push notifications (any visitor who opts in)
- The push subscription your browser generates (endpoint URL and encryption keys)
- Browser user-agent, used to manage and clean up stale subscriptions
You can enable browser notifications without being a subscriber; disabling them in your browser removes the record.
Contributor programme applicants
- Name, email, and (optionally) phone number and organisation
- Station location — city, state, country, and approximate latitude/longitude
- Receiver/host type, feeder software, and connection details you provide
- Your reason for applying and any additional notes you submit
- The IP address and user-agent of the submission, kept for anti-abuse and audit
Enquiries, sample-report requests, and feedback
- Name, email, organisation, role, and phone number where you provide them
- The content of your message or request, and the page it was sent from
- The IP address and user-agent of the submission, kept for anti-abuse
Website usage
- Pages you view, time spent on them, and clicks and other interactions with page elements
- Session replays — a reconstruction of your visit, used to find where the site is confusing or broken
- Device, browser, operating system, screen size, referring page, and an approximate location derived from your IP address
- A randomly generated visitor identifier, stored in your browser rather than in a cookie. We do not link it to your name or email address.
- Whether a visit arrived from one of our Google Ads and whether it led to a sign-up, for conversion measurement
This is collected by the analytics and advertising providers named in section 7. See section 9 for the cookies and browser storage involved, and for the regional consent defaults that apply.
Technical data
- IP address and user-agent — used for rate-limiting and abuse prevention. IPs used solely for rate-limiting are held transiently and not written to long-term storage; where an IP is stored with a form submission (above) it is retained with that record.
- Error and delivery logs
Aircraft data (not personal data)
ADS-B signals are broadcast by aircraft transponders and relate to aircraft assets, not individual pilots or passengers. This data is not personal data under the NDPA 2023.
3. How We Use Your Data
- To deliver real-time airspace alerts to your chosen channel (email or Telegram)
- To send verification, management, and unsubscribe links
- To process subscription payments via Paystack
- To improve system performance and diagnose delivery failures
- To comply with applicable Nigerian law
We do not sell, rent, or share your personal data with third parties for marketing.
4. Legal Basis for Processing
Under the Nigeria Data Protection Act 2023 (NDPA), we process your data on the basis of:
- Consent — you voluntarily subscribe and verify your email
- Contract — processing necessary to deliver the service you subscribed to
- Legitimate interests — system security, fraud prevention, and service improvement
5. Data Retention
- Active subscriber and company account data: retained while your subscription or account is active.
- After you unsubscribe or close your account: we stop processing your data for alerts immediately, and delete or anonymise it on request (see §6). We aim to remove unsubscribed individual-subscriber records within 90 days.
- Contributor applications: approved applications are retained for the duration of the contributor relationship; declined or withdrawn applications are retained up to 12 months for anti-abuse and audit, then deleted.
- Push subscriptions: retained until you disable notifications or the endpoint becomes invalid.
- Alert delivery logs and API usage logs: retained for up to 12 months for troubleshooting and security.
- Payment records: retained for 7 years as required by Nigerian financial and tax regulations.
6. Your Rights (NDPA 2023)
You have the right to:
- Access — request a copy of your personal data we hold
- Rectification — correct inaccurate data via your management link
- Erasure — request deletion of your data (subject to legal retention obligations)
- Restriction — limit how we process your data
- Portability — receive your data in a structured, machine-readable format
- Withdraw consent — unsubscribe at any time via your unsubscribe link
To exercise any right, email privacy@adsbng.app. We will respond within 30 days.
7. Third-Party Services
- Supabase — managed PostgreSQL database and realtime infrastructure
- Google Cloud Platform — hosting for our data-ingest gateway and contributor decoding infrastructure
- Render — API server hosting
- Vercel — website and frontend hosting
- Paystack — payment processing (PCI-DSS compliant, Nigeria)
- PostHog — product analytics and session replay, so we can see how the site is used and where it fails (servers in the United States)
- Google Ads — advertising, and its site tag for measuring which visits result in a sign-up
- Telegram — optional alert delivery channel (only if you choose it)
- Browser push services (e.g. Google, Mozilla, Apple) — deliver the browser notifications you opt into; the endpoint is chosen by your browser
Each provider has its own privacy policy governing data processed on their platforms. Some of these providers process and store data on servers outside Nigeria. Aircraft reference-data sources are described in our Disclaimer.
8. Security
We implement appropriate technical and organisational measures to protect your data including encrypted connections (HTTPS/TLS), row-level security on our database, and restricted API access. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Cookies & Similar Technologies
Essential
Session cookies that keep you signed in to the company portal. These cannot be switched off without breaking authentication.
Advertising and conversion measurement
We advertise this service on Google Ads and run Google's site tag (gtag.js) so we can tell which visits lead to a sign-up. It sets Google's _gcl_ cookies. We use it only to measure ad performance; the data it collects is processed by Google under its own policies. We do not build advertising profiles ourselves, and we do not sell your personal data.
Product analytics
PostHog records how the site is used, including session replays. It keeps its visitor identifier in your browser's local storage rather than in a cookie, so clearing site data resets it.
Regional consent defaults
For visitors in the European Economic Area, the United Kingdom and Switzerland, advertising and analytics storage are denied by default: Google's tag runs without storing advertising or analytics identifiers on your device, and personalised advertising is not applied. We do not currently present a consent banner to opt those visitors in. For all other visitors, including Nigeria, measurement is enabled.
You can clear or block cookies and site data at any time in your browser settings, and browser tracking protection or an ad blocker will stop the advertising and analytics tags from loading. Blocking anything other than the essential session cookies does not affect your access to the service.
10. Changes to This Policy
We may update this policy periodically. When we do, we will update the date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact & Complaints
For privacy concerns contact privacy@adsbng.app. If you are unsatisfied with our response you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.