How iKonnecT handles data for ISPs and their subscribers.

This Policy applies to:

• Tenants (ISPs, WISPs, hotspot operators and related businesses) using iKonnecT.
• Users who access the platform on behalf of tenants (for example, administrators, technicians, finance teams and support staff).
• Subscriber information processed through the platform, such as hotspot users, home or business internet subscribers and prepaid voucher users.

For tenant subscribers, iKonnecT typically acts as a data processor, and the tenant acts as the data controller. Tenants determine what data is collected about their subscribers, the legal basis for processing and how long that data is retained in line with their own policies and legal obligations.

For our own website visitors, support interactions and account-level billing, iKonnecT may act as a controller of limited business contact information as described in this Policy.

The information processed through iKonnecT depends on how each tenant uses the platform and which modules are enabled. We group this data into the categories below.

2.1 Tenant account and configuration data

• Business name, contact person, email address, phone number and billing details.
• Login credentials for tenant users (stored in hashed form).
• Tenant-specific configuration, such as branding, subdomain, language, notification templates and access roles.
• Technical configuration required to connect to the tenant's network equipment or external systems (for example, OLT, router, RADIUS, ACS or SMS gateway details).

2.2 Subscriber and customer data

• Identifiers such as subscriber ID, account number, username and internal customer codes.
• Contact details where provided by the tenant, such as name, phone number, email address and address.
• Service information, including service plans, package type, installation details and account status.
• Voucher or hotspot account data, such as voucher codes, validity periods and allocation history.

2.3 Device, network and usage data

• Device identifiers such as MAC address, serial number, ONT ID and router identifiers.
• Network information, including assigned IP addresses, logical network segments and associated PON or access nodes.
• Connection and usage metrics, such as session start and end time, data volume used, access point used and service quality indicators.
• Diagnostic data for network operations, such as signal strength, optical power and connectivity status.

2.4 Payment and billing data

• Payment reference details such as transaction IDs, mobile money confirmation numbers, voucher numbers and the amount paid.
• Payment timestamps, payment channel and associated customer or account information.
• Billing records generated by the platform, such as invoices, receipts and account balance changes.

We do not store full card numbers, mobile money wallet balances or other sensitive financial details held by payment providers. All financial settlements are handled by the relevant payment gateway or financial institution.

2.5 Logs, diagnostics and support data

• System logs, including API calls, login attempts, configuration changes and device provisioning events.
• Error logs and performance metrics that help us monitor and improve service stability.
• Support communications, such as emails, in-app messages or tickets raised by tenants.

We use information processed through iKonnecT solely to provide and improve the services for tenants and their subscribers. Typical purposes include:

• Service delivery. Operating core features such as subscriber management, billing, voucher generation, hotspot access control, network provisioning and de-provisioning.
• Payment handling. Recording inbound payment notifications from supported providers, reconciling those payments against subscriber accounts and updating account status accordingly.
• Network automation. Assisting tenants in registering devices, assigning services, applying or revoking configurations and maintaining inventory.
• Security and fraud prevention. Protecting accounts from unauthorised access, detecting suspicious activity and enforcing rate limits or access controls.
• Analytics and optimisation. Providing tenants with aggregated reports and dashboards about their own network performance, usage patterns and financial metrics.
• Support and troubleshooting. Helping tenants resolve issues, answering questions and providing technical support.
• Legal compliance. Meeting audit, tax and regulatory obligations that apply to us as a service provider.

To avoid doubt, iKonnecT has been designed with explicit limits. In particular, we do not:

• Sell, rent or trade tenant or subscriber data to third parties.
• Provide outbound payment services, disbursements, withdrawals or merchant payouts.
• Replace official merchant dashboards offered by payment gateways or financial providers.
• Monitor or inspect the content of subscriber internet traffic for advertising or profiling purposes.
• Use subscriber data to market unrelated products or services directly to subscribers.

Tenants remain responsible for their own privacy notices to subscribers and for complying with laws that apply to them as connectivity and service providers.

The legal basis for processing subscriber data is determined by each tenant in line with the laws that apply in their jurisdiction. Common bases include the performance of a contract, legitimate interests in providing internet access and, where required, explicit consent.

Unless stated otherwise in a specific agreement:

• The tenant is the controller of subscriber data and decides what information to collect, how it is used and how long it is kept.
• iKonnecT acts as a processor on behalf of the tenant, providing the underlying infrastructure, tools and automation.
• We may act as a controller of limited business contact information for our direct relationship with tenants (for example, billing, service communications and product updates).

Data ownership.

Each tenant retains ownership of the data they load into iKonnecT, including subscriber records, billing information, device details and network metrics. We do not claim ownership of such data and only process it as necessary to provide the services, comply with law or enforce our agreements.

We keep information for as long as necessary to provide the services to tenants, to meet legal obligations and to resolve disputes. Because tenants control their own data, retention periods may vary across tenants and data types.

As a general guideline:

• Subscriber and billing records are retained in line with each tenant's legal and accounting requirements.
• Technical logs and diagnostics may be retained for a shorter period to support security, auditing and troubleshooting (for example, several months).
• Backups are maintained for a limited time to support disaster recovery procedures.

When data is no longer needed, it may be anonymised or securely deleted from active systems and backups following our internal procedures.

We only share information processed through iKonnecT where it is necessary to deliver the service, where the tenant instructs us to do so or where we are legally required. Typical categories of recipients include:

• Infrastructure and hosting providers that supply data centres, cloud platforms, storage and networking.
• Payment service providers that receive and confirm inbound payments on behalf of tenants.
• Communication providers such as SMS or email gateways used to send tenant notifications.
• Device and network systems including OLTs, routers, ACS platforms and other components integrated by the tenant.
• Professional advisers (for example, legal or accounting advisers) where necessary and subject to confidentiality obligations.

We may also disclose information if required by law, court order or a valid request from a public authority, but only to the extent necessary and in line with applicable legal safeguards.

Where data is transferred across borders, we take reasonable steps to ensure that appropriate safeguards are in place, such as contractual protections consistent with data protection requirements.

We employ technical and organisational measures designed to protect information against unauthorised access, loss, misuse or alteration. These measures evolve over time as threats and best practices change, and may include:

• Segregated environments and logical isolation between tenants.
• Encrypted connections between the platform, tenants and integrated systems where supported.
• Role-based access controls and permissions for tenant accounts.
• Hashing of passwords and secure handling of credentials.
• Logging and monitoring of critical administrative and network actions.
• Regular updates and security patches for underlying infrastructure where within our control.

No system can guarantee perfect security. Tenants also play a critical role in protecting data by choosing strong passwords, managing access rights, securing their own infrastructure and promptly notifying us of any suspected compromise.

Applicable laws may grant individuals certain rights in relation to their personal data, such as the right to access, correct, delete or restrict processing, or to object to certain uses. Where iKonnecT acts as a processor on behalf of a tenant, we will refer any request from a subscriber to the relevant tenant, who is responsible for handling the request.

If you are a subscriber of a tenant using iKonnecT and wish to exercise your data protection rights, please contact your service provider directly. We will cooperate with tenants, where appropriate, to support them in responding to such requests.

If you interact with iKonnecT directly as a tenant (for example, as a billing or contact person), you may contact us using the details below to request access, correction or deletion of your business contact information, subject to our legal obligations.

iKonnecT is intended for use by businesses, not by children. We do not knowingly target or market the platform to children. Tenants are responsible for determining whether they provide services to minors and for ensuring that they comply with applicable laws regarding children's data in their jurisdictions.

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or operational practices. When we make material changes, we will take reasonable steps to notify tenants, such as through the platform interface or by email, and will indicate the date of the latest revision at the top of this page.

Continued use of the platform after an update takes effect will constitute acceptance of the revised Policy by tenants. Where required by law, additional consent may be sought for specific changes.

If you have questions about this Privacy Policy, our role as a processor or your data protection rights, you can contact us using the details below:

• Service name: iKonnecT
• Contact email: [email protected]
• Preferred subject line: "Privacy enquiry"

For subscriber-specific questions, including access to or deletion of data held about you by an ISP using iKonnecT, please contact your service provider directly using the channels they publish on their website, bills or signup pages.