Data Deletion Policy

1. Overview

On Air Proof ("OAP") respects your right to have your personal data deleted. This policy explains what happens when you close your account or request deletion of your data, what data is removed, what is retained for legal compliance, and how long each step takes.

This policy applies to all account types: advertising agencies, companies, media marketers, brokers, individuals, and radio station accounts.

2. How to Request Account Deletion

You can request account deletion through any of the following methods:

• Self-service: Go to Profile → Close Account in your dashboard. You will be asked to confirm and provide a reason. Your account will be immediately deactivated.
• Email request: Send an email to nuworldentertainment.nwe@gmail.com from the email address associated with your account, stating "Delete my account."
• In-app support: Use the support chat to request account deletion.

We verify your identity before processing any deletion request. Email requests are responded to within 5 business days.

3. What Gets Deleted

Upon account deletion, the following data is permanently removed:

• Personal information: name, email, phone number, address, company details, profile photo/avatar
• Uploaded audio files: all MP3, WAV, M4A, and AAC files uploaded for monitoring (from both Google Drive and local storage)
• Audio fingerprints: fingerprint registrations with ACRCloud are deactivated and scheduled for removal
• Campaigns: all campaign records, including campaign-advert links and status history
• Broadcast schedules: all scheduled air-time entries
• Off-air dubs: all recorded broadcast clips associated with your account
• Detection records: all proof-of-play detection data
• KYC/verification documents: CAC certificates, ID documents, and verification records
• Team member relationships: all manager/department head linkages (team member accounts become independent)
• Session data: login sessions, CSRF tokens, and cookies

4. What We Retain (and Why)

Nigerian law and financial regulations require us to retain certain records even after account deletion:

• Payment/transaction records: retained for 7 years as required by the Federal Inland Revenue Service (FIRS) for tax compliance. These records are anonymised (personal identifiers removed) but the transaction amounts, dates, and reference numbers are preserved.
• Email address hash: a one-way hash of your email address is retained permanently to prevent re-registration of closed accounts. The actual email address is deleted.
• Compliance log summaries: if your account participated in compliance contests (back-check logs), anonymised aggregate compliance statistics may be retained for regulatory reporting purposes.
• Legal hold data: if your data is subject to a legal dispute, regulatory investigation, or valid court order, we may retain specific records as legally required until the matter is resolved.

5. Deletion Timeline

6. Radio Station Accounts

Radio station accounts (traffic managers, commercial department staff) may request deletion at any time. Upon deletion:

• Your station profile, contact details, and login credentials are permanently removed
• Any compliance logs you reviewed will retain an anonymised record of the review verdict (confirmed/disputed/missed) for the agency's compliance audit trail, but your personal details are removed
• You will no longer receive compliance logs for review

7. Team Member Accounts

If you are a team member (manager or department head) added by an account owner:

• You may request deletion of your own account independently
• The team owner will be notified that you have left the team
• Any campaigns or actions you performed on behalf of the team owner will be re-attributed to the owner

If the team owner deletes their account, all team member relationships are dissolved. Team member accounts remain active as independent accounts but lose access to the owner's campaigns and data.

8. Compliance Logs & Contest Records

Compliance logs involve two parties: the agency and the station. When either party deletes their account:

• The log's content (spot data, verdicts, compliance rates) is retained in anonymised form for the remaining party's records
• Personal identifiers (name, email, phone) of the deleted party are removed from the log
• The log remains accessible to the non-deleted party for audit purposes

9. Third-Party Data

When you delete your OAP account, we also request deletion from our third-party processors:

• ACRCloud: fingerprint deactivation within 30 days
• Google Drive: uploaded files removed from our Google Drive storage within 30 days
• Payment processors (Flutterwave, Paystack): we cannot delete data held independently by payment processors under their own retention policies. Contact them directly if needed.
• Google OAuth: if you signed in with Google, revoke OAP's access from your Google Account security settings

10. Confirmation of Deletion

Once your data has been fully deleted (within the 30-day processing window), we will send a final confirmation email to the email address on record confirming:

• All personal data has been removed
• What data (if any) has been retained under legal obligations
• The date the deletion was completed

11. Re-Registration After Deletion

Once an account is closed and deleted:

• The email address used cannot be used to register a new account
• Previously uploaded data cannot be recovered
• Subscription time remaining at the time of deletion is forfeited (see our Refund Policy for refund eligibility)

12. Contact Us

For questions about this deletion policy or to request data deletion:

• Email: nuworldentertainment.nwe@gmail.com
• Platform: onairproof.com
• Company: Nu World Entertainment, Nigeria

If you are unsatisfied with how we handle your deletion request, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.