Privacy Policy

Draft for legal review. Written to reflect the Nigeria Data Protection Act 2023 principles; have a Nigerian data-protection lawyer confirm it (including any registration or DPO obligations) before launch.

What we collect

• Applicants: name, email, optional phone, CV, cover letter, links and answers to recruiter questions — only when you submit an application.
• Followers, newsletter and event interest: your email (and optional name).
• Providers: name, email, hashed password, profile details, payment references (card details go to Paystack, never to us).
• Usage: page views, clicks and referrers, using a daily anonymised visitor hash instead of your IP address.

How we use it

To deliver applications to recruiters, send confirmations and notifications you asked for, prevent abuse, process payments and measure performance. We do not sell personal data.

Who sees it

Recruiters see applications sent to them. CVs are stored privately and are only accessible to the recruiter you applied to. Service providers (email delivery, Cloudinary storage, Paystack, hosting) process data on our behalf. Ad networks (Google AdSense, Adsterra) may set cookies on pages that show ads.

Retention

Applications and their CVs are automatically deleted after 365 days. Unconfirmed follow requests are deleted after 7 days.

Your rights and deletion

You may access, correct or delete your data. Because applicants have no account, you can erase everything linked to your email at Delete my data. Unsubscribe links are in every notification email. Providers can delete their account and all its data from Account Settings.

Security

Passwords are hashed, sessions are httpOnly cookies, uploads are validated, and access is limited by ownership checks.