Early Access Privacy Notice

Alethris is not open yet. This notice explains what happens to the details you give when you ask for early access or book a call with us: who keeps them, what for, where, for how long, and how to have them removed. Clause 11 says how we count visits to our website, what happens when one of its pages fails, and what it keeps on your device. Once you hold an Alethris account, the Privacy Notice for Account Holders covers that account.

1. Who we are

The early-access list and the calls booked with us are kept by iSoterik Limited (iSoterik, we, us), which builds Alethris, a company registered in Nigeria with number RC 9910229, whose registered office is at No 22 Benin Street, Malali, Kaduna. We decide what both are for and how they are kept, so we are their data controller.

This notice is given under the Nigeria Data Protection Act 2023 (the Act). You can write to us about anything in it at privacy@alethris.com.

2. What we collect

From the form:

• your email address and your name;
• which of these describes you: running an academy, training at an organisation, teaching as an instructor, or learning;
• if you choose to tell us, the name of your academy or organisation, what you teach, roughly how many learners you teach in a year, and how you run your programmes today.

Alongside it:

• what brought you to the form, where an address you opened on our site says so: the campaign tags on a link we shared (its source, medium, campaign and content), and the page you came from;
• the version of this notice you were shown, and when you agreed to it.

Your request is stored without your connection address, and the form sets no cookies.

When you book a call:

• your name, your email address and the time you choose;
• if you answer them, the booking form's questions: your academy's name, what you teach, how big a cohort is and how often you run one, how learners pay you today, and when your next cohort starts;
• anything you add for us to read before the call.

The booking form is Cal.com's, shown on our page once you choose to see the available times. From then, Cal.com keeps what it needs on your device to hold the time you choose — a short-lived security cookie and a note of the time you are booking — as its own privacy policy explains. If you asked for early access earlier on the same visit, the form opens with your name, email, academy and what you teach already filled in: our page holds them in its memory and hands them to Cal.com's form when it opens, and they are gone once you book, reload the page or leave our site. We store nothing more to do it.

3. Checking that a person sent it

Before a request is accepted, Cloudflare Turnstile checks that a person, not a program, is sending it. Most people never see the check. To make it, Cloudflare reads signals from your browser and device, and we pass it your connection address when we confirm the result. Cloudflare uses these to run the check, under its own privacy policy. We keep nothing from the check.

4. Why we use it, and on what basis

We use your details to:

• invite you to early access as places open;
• tell you when Alethris opens;
• reply when you write to us, and hold a call you book with us;
• decide the order in which we invite academies, from what you tell us about yours.

We may also describe the list in numbers, such as how many academies have asked and how large they are, when we speak to investors, funders or partners. We never name you, or pass on your details, to do so.

We rely on your consent, which you give by ticking the box on the form. You can withdraw it at any time by writing to privacy@alethris.com, and we will then remove your request. We do not use your details to market anything else, and we never sell them.

When you book a call, we use what you give for that call alone: to hold it, to prepare for it, and to follow it up. We rely on your request, since a call you ask for is a step you take towards an agreement you may make with us. You can cancel the call from its confirmation email, and have the booking removed by writing to privacy@alethris.com.

We count visits to our website, and record the failures of its pages, as clause 11 describes, because we have a legitimate interest in knowing which pages people read and whether the site works well for them. We see only totals of visits, never who visited, and a report of a failure names no one.

5. Who can see it

Only the people at iSoterik who work the list or take the calls can see what you give. Three providers hold or carry it for us, under written terms that limit them to our instructions:

When a page of our website fails, a report of the failure goes to Sentry, in Germany (clause 11). It never carries what you entered in the form.

6. Where it is held, and transfers out of Nigeria

The list is stored outside Nigeria, in Western Europe, and a request crosses Cloudflare's global network on its way there. We make this transfer under written terms with Cloudflare that require it to protect your data to the standard the Act sets, and because keeping your request there is what you asked us to do. Cloudflare counts visits to our website on the same network, under the same terms.

A call you book is held by Cal.com in the United States, and in our calendar. We make that transfer under written terms with Cal.com that require it to protect your data to the standard the Act sets, and because holding the call is what you asked us to do.

A report that a page failed is held by Sentry in Germany, in the European Union, under written terms that require it to protect it to the standard the Act sets.

7. How long we keep it

We keep your request until Alethris opens and we have invited everyone on the list, and never for more than six months after Alethris opens. Then we delete it. When Alethris opens, we may move the list into Alethris's own systems to send the invitations; the same purposes and limits apply there. An invitation we send you to start an academy is kept, with our note of why we sent it, until twelve months after it is used, withdrawn or runs out.

If you ask again with the same email address, your new answers replace the old ones, and we keep the date you first asked and what first brought you to the form.

We keep a call's booking, and any notes from the call, for as long as we keep the list, and delete them with it.

If you create an Alethris account, the Privacy Notice for Account Holders covers that account from then on.

8. Your rights

Under the Act you may ask us for a copy of what we hold about you, to correct it, to erase it, to restrict how we use it, and to withdraw your consent. Write to privacy@alethris.com, from the address you gave us or naming it. We will reply within thirty days, and we may first ask you to confirm that the address is yours. A request to be removed takes your details off the list for good.

You may also complain to the Nigeria Data Protection Commission; clause 13 says how.

9. How we protect it

The list is kept in a database that only the people who work it can reach, and it travels over encrypted connections. Bookings are kept in accounts that only the people who take the calls can sign in to, each with a second step at sign-in. A copy taken to work the list is kept on our own computers, never shared, and deleted once it has been used.

10. Children

Early access is for adults. If you are under 18, please do not ask for it. If we learn that we hold a request from someone under 18, we will delete it.

11. Visiting our website, and cookies

You can read our website without telling us anything, and it keeps very little on your device:

• No tracking. We set no cookies of our own unless you choose a light or dark theme, which a cookie remembers for a year. We run no advertising or tracking tools, and nothing follows you to other websites.
• Counting visits. Cloudflare, which carries every request to our website, counts the pages visited, where visitors came from, their country and kind of device, and how quickly pages load. It keeps nothing on your device and does not identify you, and we see only the totals.
• When a page fails. If a page breaks in your browser, or on our server while it is being prepared, a report goes to Sentry, in Germany, so that we can fix it. It says what went wrong and where in our code, the page's address without anything after a question mark, the pages and buttons that led to it, and your browser's name, version, language and time zone. It carries no cookie, nothing you typed and no email address. It reaches Sentry through our own site, so Sentry does not see your connection address, and Sentry keeps it for ninety days at most. Nothing is kept on your device.
• Campaign tags. If you arrive through a link carrying campaign tags, our page holds them in its memory while you move around the site, so that a request for early access still records them (clause 2). Nothing is kept on your device, and they are gone when you reload the page or leave.
• The film. Our home page and the page where you book a call show a short film hosted by Mux, in the United States. Your browser fetches its opening picture from Mux as it comes into view, and the film only if you play it, so Mux sees your connection address and the page you are on. We send Mux nothing about you, and it sets no cookies.
• The early-access form. The check in clause 3 keeps a small item in your browser to run it, and nothing that identifies you.
• Booking a call. Cal.com's calendar loads only when you ask to see the available times; clause 2 says what it keeps.

Nothing here is kept on your device unless you chose it or it keeps the site secure, so we do not ask for consent and show no cookie banner. If you hold an Alethris account, clause 10 of the Privacy Notice for Account Holders lists the cookies Alethris uses once you sign in.

12. Changes to this notice

We will publish any change here with a new version number and the date it takes effect. If a change affects how we use details you have already given, we will tell you before it takes effect.

13. Contact and complaints

iSoterik Limited, No 22 Benin Street, Malali, Kaduna.

• Privacy: privacy@alethris.com

If you are unhappy with how we have handled your details, please tell us first so that we can put it right. You may also complain to the Nigeria Data Protection Commission at any time, through ndpc.gov.ng.