Privacy notice

EIRIS (Election Intelligence, Reporting & Incident System) is software that campaigns, parties and election-monitoring organisations use to run an election-day Situation Room. In this notice, "EIRIS", "we" and "us" mean the operator of eiris.ng.

When an organisation uses EIRIS, that organisation decides what information its Situation Room collects and why. For that information, the organisation is the data controller and EIRIS processes it on the organisation's instructions. For information we collect ourselves, such as walkthrough requests on this website, EIRIS is the controller.

On this website:

• Details you send in our contact and walkthrough forms: your name, role, party or organisation, the race and state you are preparing for, phone or WhatsApp number, email and your message.
• Basic technical information needed to serve the site securely, such as your IP address and browser type.

Inside an organisation's Situation Room (on that organisation's behalf):

• Account details of the organisation's staff and polling-unit agents: name, phone, email, role and assignment.
• What agents report: check-ins, incident reports, result-sheet photos and figures, photos and videos, and the time and GPS location at which they were captured.
• Records of who did what in the system, such as who reviewed a result or acknowledged an incident.

EIRIS records the election process and an organisation's own team. It is not built to profile, track or target voters.

• We do not build profiles of voters or infer anyone's political preferences.
• We do not use facial recognition.
• We do not track agents continuously. Location is recorded when an agent checks in or files a report.
• We do not sell personal information or use it for advertising.

• To reply to you and arrange a walkthrough you asked for.
• To run each organisation's Situation Room as that organisation instructs.
• To keep evidence intact: photos and videos are fingerprinted when captured so any later change can be detected.
• To keep the service secure, prevent misuse and meet legal obligations.

We process personal data in line with the Nigeria Data Protection Act 2023. Depending on the activity, the basis is your consent (for example, when you submit a form), the performance of a contract with an organisation, compliance with a legal obligation, or legitimate interests that are not overridden by your rights.

Information inside a Situation Room is visible only to the people that organisation authorises, according to their role and area. One organisation's data is kept separate from every other organisation's.

We use carefully chosen service providers to host and run EIRIS, such as cloud hosting, storage and email delivery. They process data only on our instructions. Some providers may store data outside Nigeria; where that happens we put appropriate safeguards in place as the law requires. We disclose information to authorities only where the law requires it.

Walkthrough and contact requests are kept for up to 24 months after our last contact with you, unless you ask us to delete them sooner.

Inside a Situation Room, each organisation sets how long its records are kept. Evidence and audit records may need to be kept longer, for example while an election petition is open. When an organisation's agreement ends, it can export its data and we then delete it within the period agreed in its contract.

We use encryption in transit, role-based access limited by area, an append-only record of sensitive actions, fingerprinting of evidence at capture, and tested backups. No system is perfectly secure, and we will tell affected organisations and the Nigeria Data Protection Commission about a personal data breach where the law requires it.

You can ask to access, correct or delete your personal data, object to or restrict how it is used, withdraw consent, and ask for a copy in a portable format. If your data is held in an organisation's Situation Room, we will pass your request to that organisation, which decides on it. You may also complain to the Nigeria Data Protection Commission.

For any privacy question or request, write to us through the contact page at eiris.ng/contact and choose "Security and data questions". We aim to respond within the time the law requires.