Privacy Policy

Last updated 29 August 2026

AfriAssist is operated by Afristack Smart System Ltd ("we", "us"), a company registered in Nigeria. This policy explains what we collect, why, who else sees it, and what you can ask us to do about it.

It covers the AfriAssist website and application at afriassist.com and afriassist.onrender.com.

1. What we collect

Information you give us

Account details — your name and email address. If you sign up with a password, we store a cryptographic hash of it, never the password itself.
Content you create — the briefs, scripts, storyboards, lyrics, prompts and settings you enter, and the images, videos and audio generated from them.
Reference photographs — images you upload for character or performer likeness.
Business information — anything you add to Business Brain, such as products, brand rules or audience notes.

Information from Google, if you connect it

Your email address, name and profile picture, used to identify your account.
Access tokens for the permissions you granted. We store these so that publishing works without asking you to sign in again.

Information created by using the service

Coin ledger — every credit spent or refunded, and what it was spent on.
Payment records — plan, amount, currency, reference and status. We never see or store your card details. Those go directly to Paystack.
Session records — a hashed session token, your browser's user-agent string, and an expiry date.
Connection records — which platforms you have linked and the account identifier the platform gave us.

2. Why we use it

To run the service — generating what you ask for, storing it, and showing it back to you.
To keep you signed in and to protect your account.
To meter and charge coins accurately, and to refund them when a generation fails.
To publish content to platforms you have connected, when you tell us to.
To send transactional email: verification codes, receipts, and notices about your account.
To investigate abuse, fraud, or breaches of our terms.

We do not sell your information. We do not use your content to train our own models, and we do not advertise to you.

3. Google user data

AfriAssist's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect a Google account, we request only what the features you use require:

Permission	What we do with it
See your email address userinfo.email	Identify your AfriAssist account and match it to an existing one, so signing in with Google does not create a duplicate.
Upload YouTube videos youtube.upload	Publish a video you have made, only when you press Publish and choose YouTube. Uploads are set to private unless you choose otherwise.
View your YouTube account youtube.readonly	Show which channel is connected, and read basic public counts so you can confirm you are publishing to the right place.

We do not:

Transfer Google user data to any third party, except as necessary to provide the feature you asked for, to comply with the law, or as part of a merger or acquisition with notice to you.
Use Google user data for advertising.
Use Google user data to develop, improve or train generalised artificial intelligence models.
Allow humans to read your Google user data, except with your explicit consent, to resolve a specific support issue you have raised, for security purposes, or where required by law.

You can disconnect Google at any time from the Connections page, which deletes the stored tokens. You can also revoke access directly at myaccount.google.com/permissions.

4. Who else processes your information

We use the following providers to run AfriAssist. Each receives only what its part of the job requires.

Provider	What they receive
OpenAI	Prompts and reference images, to generate images and text.
reAPI	Prompts, stills and audio, to generate video and images through the engine you chose.
Suno (via sunoapi.org)	Your music brief and lyrics, to generate audio.
Spitch	Text to be spoken, where voice narration is used.
Post for Me	Your caption and finished video, to publish to TikTok and similar platforms.
Google	Sign-in, and video uploads to your own YouTube channel.
Paystack	Your email address and the amount, to take payment. Card details go to them directly and never reach us.
Cloudflare R2	Storage for the images, video and audio you create.
Neon	The database holding your account and your work.
Render	Hosting for the application itself.

Some of these providers operate outside Nigeria, so your information may be processed abroad. We only use providers that offer appropriate safeguards for that transfer.

5. How long we keep it

Your account and content — until you delete it or ask us to close your account.
Sessions — 30 days, then automatically expired.
Verification codes — minutes, then discarded.
Payment and coin records — retained as long as required for tax and accounting obligations, typically six years, even after an account closes.
Google tokens — until you disconnect, or revoke access at Google.

6. Your rights

Under the Nigeria Data Protection Act, and equivalent laws where they apply to you, you may:

Ask what we hold about you, and get a copy.
Correct anything inaccurate.
Delete your account and the content in it.
Withdraw a connection or permission at any time.
Object to a particular use, or ask us to restrict it.
Complain to the Nigeria Data Protection Commission.

Write to support@afriassist.com and we will respond within 30 days.

7. Security

Everything travels over HTTPS.
Passwords are hashed, never stored in a readable form.
Session tokens are stored hashed, so a copy of our database does not let anybody sign in as you.
Access to production systems is limited to people who need it.

No system is perfectly secure. If a breach affects your information, we will tell you and the relevant authority as the law requires.

8. Children

AfriAssist is not intended for anybody under 18. We do not knowingly collect information from children. If you believe a child has given us information, write to us and we will remove it.

9. Changes

If we change this policy we will update the date at the top, and for anything significant we will tell you by email or in the application before it takes effect.

10. Contact

Afristack Smart System Ltd
Email: support@afriassist.com
Nigeria