Privacy policy
Draft for Hacksat's review. It describes what the platform does today; have it checked against Nigeria's data protection requirements and fill in the bracketed items before launch. It is not legal advice.
What we collect
- Your name, email address and password (the password is stored hashed by our authentication provider).
- For certificates: your phone number, date of birth and a passport-style photo. These are private and are never shown publicly.
- Your learning activity: enrolments, test attempts and scores, assignment submissions and questions you ask.
- Payment records (amount, status, reference). Card details are entered with Paystack and never reach us.
- Emails we sent you, so we can show what was delivered.
Why we use it
To run your account, give you access to the courses you paid for, mark your tests, issue and verify certificates, and contact you about your learning. We send newsletters only if you opted in, and you can unsubscribe at any time.
Who sees it
- Facilitators of a course see your name and progress in that course, and your submissions and questions to them.
- A certificate's public verification page shows only your name, the course title and the dates.
- Service providers process data for us: Supabase (database and storage), Vercel (hosting), Paystack (payments) and Resend (email).
Your choices
You can edit your profile in Settings. To export or delete your data, email [privacy contact email]. We handle these requests manually and will reply within [30] days.