Privacy Policy
Last updated: 21 May 2026
1. Introduction
This Privacy Policy explains how your personal and business information is collected, used, shared, and protected when you use Ahdali — an AI-powered accounting platform for Nigerian small and medium-sized enterprises (SMEs).
Ahdali is built and operated by MRT Net Solutions Ltd, a company incorporated in Nigeria. In this policy, "Ahdali", "we", "us", and "our" refer to the Ahdali service operated by MRT Net Solutions Ltd. "You" and "your" refer to the business and the individuals who use Ahdali on its behalf.
We have written this policy in plain language because you should be able to understand what happens to your data without needing a lawyer to explain it. Please read it carefully. By creating an account or using Ahdali, you confirm that you have read and understood this policy.
2. Who We Are — The Data Controller
The data controller responsible for your personal information is:
- Legal entity: MRT Net Solutions Ltd
- CAC reference: RC725668
- Tax Identification Number (TIN): 10382696-0001
- Registered address: Suite D0, UYK Hexahub, Balanga Crescent, Area 11 Garki, Abuja, FCT, Nigeria
- Email: info@mrtnetsolutions.com
- Phone: +234 809 102 9333
A "data controller" is the organisation that decides why and how your personal data is processed. For any privacy question, request, or concern, please contact us using the details above.
3. The Information We Collect
We collect only the information we need to provide and improve the Ahdali service. This falls into five categories.
3.1 Account and personal data
Information you provide when you register and use your account, including your full name, email address, phone number, company or business name, and your role within the business.
3.2 Financial and accounting data
The accounting information you create, upload, or generate inside Ahdali, including transactions you describe in plain language, invoices, bills and receipts, customer and vendor records, ledgers, journals, double-entry accounting records, financial statements and reports.
3.3 Bank transaction data
Where you choose to connect your business bank account, we retrieve your bank transaction records to support reconciliation. This is explained fully in Section 5.
3.4 Payment data
Information relating to your subscription and AI-credit purchases. Card payments are processed by Paystack. Ahdali does not collect or store your full card numbers — see Section 7.
3.5 Usage and technical data
Information collected automatically when you use the platform, including your IP address, device and browser type, and log data and activity records within the platform.
4. Why We Collect Your Data and Our Lawful Bases
We process your data under the Nigeria Data Protection Act 2023 (NDPA). We only process personal data where we have a lawful basis to do so. The bases we rely on are:
| Purpose | Lawful basis |
|---|---|
| Creating and managing your account | Performance of a contract with you |
| Converting your described transactions into accounting records | Performance of a contract with you |
| Connecting to your bank account and retrieving transactions | Your consent (you choose to connect; you can disconnect) |
| Performing AI analysis, categorisation, anomaly detection, and reporting | Performance of a contract with you |
| Enabling partner-accountant review of your statements | Performance of a contract with you / your consent |
| Processing subscription and AI-credit payments | Performance of a contract with you |
| Securing the platform, preventing fraud, and keeping audit logs | Our legitimate interest in operating a safe service |
| Sending service-related communications | Performance of a contract with you |
| Sending marketing communications (where applicable) | Your consent |
| Meeting tax, accounting, and regulatory obligations | Compliance with a legal obligation |
Where we rely on your consent, you may withdraw it at any time by contacting us or by using the relevant setting in the platform. Withdrawing consent does not affect processing carried out before withdrawal.
5. Connecting Your Bank Account (Mono)
Ahdali can connect to your business bank account so that your bank transactions can be pulled into the platform for reconciliation against the records you create.
- The bank connection is provided through Mono, a licensed Nigerian open-banking provider.
- Access is strictly READ-ONLY. Ahdali can view and retrieve your transaction history only. Ahdali cannot move money, make payments, or initiate any transaction on your account.
- We retrieve information such as transaction dates, amounts, descriptions, and account balances for the connected business account.
- You choose whether to connect a bank account. You can disconnect it at any time, after which we will stop retrieving new transactions.
- When you connect an account, your interaction with your bank's authorisation process and Mono's handling of your data are also subject to Mono's own privacy policy, which we encourage you to review.
6. How Artificial Intelligence Processes Your Data
Ahdali uses artificial intelligence (AI) to deliver its core features — converting plain-language descriptions into accounting entries, categorising transactions, detecting anomalies, writing report commentary, and answering your questions.
- The AI analysis is performed using third-party large language model (LLM) providers, which Ahdali accesses through OpenRouter, an AI routing service.
- To deliver these features, your financial and transaction data is sent to and processed by these third-party AI providers. This processing is necessary for the service to function.
- These AI providers process the data to generate a result and return it to Ahdali. We select providers and configure our integrations with the goal of protecting your data, but you should be aware that your financial data is processed by external AI systems.
- Some of these AI providers may process data on infrastructure located outside Nigeria — see Section 10 on international transfers.
- AI-generated records and analysis are tools to assist you. They may contain errors and should be reviewed. This is addressed further in the Ahdali Terms & Conditions.
If you are not comfortable with your financial data being processed by third-party AI providers, please do not use the Ahdali service.
7. Payments (Paystack)
Subscriptions and AI-credit top-ups are billed through Paystack, a licensed Nigerian payment processor.
- When you make a payment, your card and payment details are collected and processed directly by Paystack.
- Ahdali does not store your full card number. We may retain limited records such as the payment amount, date, status, and a reference, so that we can manage your subscription and provide receipts.
- Paystack's handling of your payment data is governed by Paystack's own privacy policy.
8. Partner-Accountant Access
Ahdali may pair your business with an independent partner accountant who reviews and signs off your monthly statements through a dedicated portal.
- Where you are paired with a partner accountant, that accountant may access your financial and accounting data within Ahdali for the purpose of reviewing and certifying your statements.
- Partner accountants are independent professionals. They are required to handle your data confidentially and use it only for the review and sign-off service.
- The role and responsibilities of partner accountants — including the important point that they do not file or remit taxes on your behalf — are set out in the Ahdali Terms & Conditions.
9. How We Share Your Data — Sub-Processors and Third Parties
We do not sell your personal data. We share data only with the parties needed to operate the service, and only as far as necessary. Our key sub-processors and third parties are:
| Third party | Purpose |
|---|---|
| Mono | Read-only access to your business bank transaction data |
| Paystack | Processing subscription and AI-credit payments |
| OpenRouter and the underlying AI model providers | AI processing of financial data (categorisation, analysis, reporting, Q&A) |
| Cloud hosting and infrastructure providers | Hosting the platform and storing your data securely |
| Email and communication tools | Sending service and account communications |
| Partner accountants | Reviewing and signing off your monthly statements (where you are paired) |
We may also disclose data where required by law, by a court, or by a regulator such as the Nigeria Data Protection Commission (NDPC), or to protect our legal rights. We require our sub-processors to handle your data securely and to use it only for the purposes we have engaged them for.
10. International Data Transfers
Some of our sub-processors — in particular the third-party AI providers and certain cloud infrastructure — may process or store data on servers located outside Nigeria.
Where your data is transferred outside Nigeria, we take steps to ensure it remains protected, in line with the NDPA and the Nigeria Data Protection Commission's framework. These steps include entering into data processing agreements and contractual safeguards with our sub-processors, selecting providers that apply recognised security standards, and limiting transferred data to what is necessary to deliver the service.
By using Ahdali, you acknowledge that your data may be processed outside Nigeria as described in this policy.
11. Data Retention
We keep your personal and financial data only for as long as necessary.
- While your account is active, we retain your data to provide the service.
- After your account is closed, we retain certain records for a limited period to meet legal, tax, accounting, and audit obligations, and to resolve disputes.
- When data is no longer required, we delete it or anonymise it securely.
You may request export of your data before closing your account — see the Ahdali Terms & Conditions for details on data export on termination.
12. How We Protect Your Data
We apply technical and organisational security measures appropriate to the sensitivity of financial data, including encryption of data in transit and at rest, access controls so that staff and partner accountants only access the data they need for their role, audit logging of activity within the platform, secure and reputable cloud infrastructure, and internal procedures for detecting and responding to security incidents.
No system can be guaranteed to be completely secure. You also play a role in protecting your data — please keep your login credentials confidential and notify us immediately if you suspect unauthorised access.
13. Data Breach Notification
In the event of a personal data breach that poses a risk to your rights, we will notify the Nigeria Data Protection Commission and, where required, affected users, in line with the timeframes and obligations set out under the NDPA and the NDPC's framework.
14. Your Rights Under the NDPA
Under the Nigeria Data Protection Act 2023, you have the following rights in relation to your personal data:
- Right of access — to be told what personal data we hold about you and to obtain a copy.
- Right to rectification — to have inaccurate or incomplete personal data corrected.
- Right to erasure — to request deletion of your personal data, subject to our legal retention obligations.
- Right to object — to object to certain processing, including direct marketing.
- Right to restrict processing — to ask us to limit how we use your data in certain circumstances.
- Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format.
- Right to withdraw consent — where processing is based on consent.
- Right to lodge a complaint — to complain to the Nigeria Data Protection Commission (NDPC) if you believe your data has been handled unlawfully.
To exercise any of these rights, contact us at info@mrtnetsolutions.com. We will respond within the timeframe required by the NDPA. We may need to verify your identity before acting on a request.
15. Cookies
Ahdali uses cookies and similar technologies to keep you logged in, remember your preferences, and understand how the platform is used so we can improve it. You can control cookies through your browser settings, although disabling some cookies may affect how the platform works.
16. Children
Ahdali is a business tool intended for use by registered businesses and the authorised adults who run them. The service is not directed at, or intended for, anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a minor has provided us with personal data, please contact us so we can remove it.
17. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our service, our sub-processors, or the law. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you through the platform or by email. Your continued use of Ahdali after an update means you accept the revised policy.
18. Contact Us
For any question, request, or complaint about this Privacy Policy or how your data is handled, contact MRT Net Solutions Ltd at Suite D0, UYK Hexahub, Balanga Crescent, Area 11 Garki, Abuja, FCT, Nigeria — email info@mrtnetsolutions.com, phone +234 809 102 9333.