We collect less than you might assume, and we'd rather explain that fully than write a short, vague policy that technically covers us but tells you nothing useful. This is the complete picture — not a summary with the real detail hidden elsewhere.
This Privacy Policy explains, in plain terms, what personal information NetL ("we," "us," "our") collects when you use the desktop application, the website at netl.online, and any related services (together, the "Platform") — why we collect it, who we share it with, and the choices and rights you have over it. This policy forms part of our Terms & Conditions, and the two documents should be read together.
This policy applies to anyone who visits the NetL website, downloads the NetL desktop application, creates an account, or otherwise interacts with the Platform. It does not cover third-party software you use alongside NetL (your video-calling app, your virtual camera driver, etc.) — those have their own privacy policies, and using them is your agreement with them, not with us.
Because NetL touches your camera and microphone, here is the plain, specific answer to the questions people actually have, before the detailed sections below:
The table below is a complete list — not a sample — of the personal data the Platform collects about you.
| Data | When it's collected | Why |
|---|---|---|
| Full name | When you create your account inside the app | Personalizing account and email communications |
| Email address | When you create your account inside the app | Your login identifier, and the channel we use to deliver account notifications |
| Password | When you create your account inside the app | Signing in. Stored only in hashed form using industry-standard methods — we cannot see or recover your actual password, ever. |
| Country | When you create your account inside the app | Basic record-keeping and, where relevant, compliance obligations tied to your location |
| IP address | When your account is created, and on each login | Fraud prevention, security, and account/session record-keeping |
| Account status | Set at sign-up and active immediately | Tracking whether your account is in good standing |
| Device identifier & device name | Each time you sign in | Enforcing the one-device-at-a-time policy described in our Terms |
| Login/logout/session timestamps | Each time you sign in or out | Account security and support (e.g. diagnosing a sign-in issue you report) |
| General app activity (e.g. app launch, virtual camera start/stop) | While the app is in use | Support and abuse prevention — not used for advertising or profiling |
Being equally explicit about this, since it matters just as much as what we do collect:
Every category of data in Section 2 exists to do one of two things: (1) create and operate your free account, or (2) enforce the security model described in our Terms (one device at a time, fraud prevention) and let us support you if something goes wrong. We do not collect data "just in case" or for undefined future use — if we can't point to one of these reasons for a piece of data, we don't collect it.
For users in jurisdictions that require us to state a specific legal basis for processing personal data (such as the EU/UK under GDPR), here is how each category maps:
| Data | Legal basis |
|---|---|
| Name, email, country | Performance of a contract — we can't create or operate your account without this. |
| IP address, device ID, session logs | Legitimate interest — securing accounts and enforcing the terms you agreed to, balanced against your privacy (we only use it for this, never for marketing). |
We share data only with the specific third-party service providers necessary to run the Platform, each for a narrow, stated purpose:
| Provider | What they receive | Purpose |
|---|---|---|
| Email delivery provider | Your name and email address | Sending account notifications |
| Database/cloud infrastructure provider | All account/session data listed in Section 2 | Secure database hosting for your account record |
We do not share your data with any other third party, advertiser, or data broker. We may disclose information if legally required to do so (for example, in response to a valid court order), or to investigate suspected fraud or violations of our Terms.
Because our infrastructure providers operate globally, your data may be processed on servers located outside your own country, including outside Nigeria. Where this involves transferring data out of a jurisdiction with its own data-transfer restrictions (such as the EU/UK), we rely on the safeguards those infrastructure providers themselves offer as part of their own compliance frameworks (such as Standard Contractual Clauses) — we do not independently transfer your data anywhere outside of what's needed to run the Platform through the providers listed in Section 6.
Account data is stored in an access-restricted cloud database, so that only our own server infrastructure can read or write to it — it is never directly exposed to the public internet, the website, or the desktop app itself. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security — but these are genuine, real technical measures, not boilerplate reassurance.
We retain account data for as long as your account remains active, plus a reasonable period afterward for legitimate business purposes such as fraud investigation and resolving disputes. Because NetL accounts cannot currently be self-deleted (see Section 5 of our Terms), if you would like your data deleted, contact us using the details in Section 19 and we will review and action deletion requests consistent with our legal obligations. As a specific benchmark: we do not hold session/login records (Section 2) for longer than is reasonably necessary for the security purpose they were collected for, and we periodically review stored data for continued necessity.
The NetL website does not use tracking or advertising cookies. It does load two third-party resources worth disclosing plainly:
Neither is used by us to track you, and neither sets a cookie tied to your NetL account.
Depending on where you're located, you may have some or all of the following rights over your personal data. We've explained what each one actually means in practice, not just named it:
You can ask us what data we hold about you. We'll send you a plain summary of the fields listed in Section 2 that apply to your account.
If something's wrong — a misspelled name, an outdated email — tell us and we'll fix it.
You can ask us to delete your data. We'll do this, subject to the retention exceptions explained plainly in Section 9.
In some jurisdictions, you can object to certain processing or ask us to pause/restrict it while a dispute is resolved.
In some jurisdictions, you can ask for a copy of your data in a portable, machine-readable format to move elsewhere.
Email support@netl.online with [PRIVACY] in the subject line, describing your request (access, correction, deletion, objection, or portability) and the email address associated with your account. We will respond within a reasonable time — normally within 30 days — and may need to verify your identity first (typically by confirming control of that email address) before actioning a request — this step exists to stop someone else from requesting deletion of your data by pretending to be you.
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. Single-device enforcement is a rule-based check (is this the currently registered device) — not algorithmic profiling of you as a person.
NetL is operated from Nigeria, and your data is processed and stored on infrastructure that may be located outside your own country. Below is how the rights in Section 11 map onto three regimes users commonly ask about. These sections describe how we apply our existing practices to each law — they do not claim a formal certification or registration beyond what's stated.
If you are located in the EU or UK, the rights in Section 11 (access, correction, deletion, objection/restriction, portability) are intended to reflect the substance of what the GDPR and UK GDPR require, and Section 5 sets out our legal basis for each category of data. We have not appointed a formal EU/UK representative or Data Protection Officer at this time — for now, all requests and questions go through Section 19.
NetL is operated from Nigeria and is subject to the Nigeria Data Protection Act 2023. Consistent with the NDPA, we process personal data lawfully and for the specific purposes described in Section 4, we apply the security measures described in Section 8 and our Security Policy, and we honor data subject rights requests as described in Section 11–12. If you are in Nigeria and unsatisfied with our response to a request, you may have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
If you are a California resident, the CCPA/CPRA gives you rights broadly similar to those in Section 11: to know what personal information is collected, to request deletion, and to non-discrimination for exercising these rights. We do not sell or "share" (as that term is defined under the CPRA) your personal information, so there is no opt-out link for sale/sharing to provide — there is nothing being sold or shared to opt out of. Submit a CCPA/CPRA request the same way as any other privacy request, per Section 12.
If you believe we have not met an obligation that applies to you under your local law, contact us first using Section 19 so we can address it directly.
NetL is not directed at, and is not intended for use by, anyone under 18 years old (see Section 3 of our Terms). We do not knowingly collect personal data from anyone under 18. If we become aware that we have, we will delete it.
If a breach occurs that we reasonably believe poses a risk to your rights or personal data, we will notify affected users by email without undue delay, and notify the relevant regulator where we are legally required to do so.
Our website and app may link to third-party resources (for example, driver download pages for virtual camera/audio software, or our GitHub Releases page). We are not responsible for the privacy practices of those third-party sites — once you leave our Platform, their own privacy policy applies, not this one.
We may update this policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email or an in-app notice. Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.
Questions, requests, or complaints about this Privacy Policy or how your data is handled can be sent to support@netl.online. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority (for example, the Nigeria Data Protection Commission, if you are in Nigeria).
| Term | What it means |
|---|---|
| Personal data | Any information that relates to an identified or identifiable person — your name and email are the clearest examples in this policy. |
| Data controller | The party that decides why and how personal data is processed — for the data described here, that's us. |
| Legal basis | The specific legal justification a data-protection law requires for collecting a category of data — see Section 5. |
| Processing | Essentially anything done with data — collecting, storing, using, sharing, or deleting it. |
| Data portability | The right to receive your data in a format you can take and use somewhere else. |
| Standard Contractual Clauses (SCCs) | A standard legal mechanism used to make an international data transfer compliant with data-protection law. |
This document works alongside our other policies: Terms of Service, Security Policy, and Copyright & DMCA Policy — or see the Legal Center for the full list.