Legal
Privacy Policy
Last updated: 29 October 2026
ITHubNg respects your privacy and complies with Nigeria's Data Protection Act (NDPA). This Privacy Policy explains what data we collect, why we collect it, and how it is protected.
1. Data We Collect
- Account data: name, email, password (encrypted), role (student / company / admin).
- Student profile: university, matric number, department, level, state, phone.
- Documents: CV and school IT / SIWES letter uploaded by the student.
- Company profile: company name, industry, website, description, logo, state, exact location.
- Application data: which opportunities you applied to and their status.
- Payment data: transaction references from Squad. We never store your full card details.
2. CV & IT Letter Storage
CVs and IT letters are stored securely in Supabase Storage. They are visible only to you and the companies whose opportunities you have applied to, and to platform administrators for verification purposes.
3. How We Use Your Data
- Match students to relevant verified SIWES / IT opportunities.
- Enable companies to review qualified applicants.
- Verify company legitimacy and prevent fraud.
- Send you notifications about your applications and account.
- Improve platform quality and diagnose issues.
4. Data Security
We use industry-standard security including TLS encryption in transit, row-level security in our database, secure storage buckets, hashed passwords and access controls. Only authorised personnel may access personal data.
5. Sharing
We do not sell your data. Data is shared only with:
- Companies you have applied to (student profile, CV, IT letter).
- Squad (payment gateway) — for processing student access fees.
- Supabase (infrastructure provider) — for hosting.
- Regulators or courts, where legally required.
6. Your Rights (NDPA)
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and data.
- Withdraw consent for optional processing.
- Lodge a complaint with the Nigeria Data Protection Commission.
To exercise any of these rights, contact [email protected].
7. Retention
Account and application data are retained while your account is active. You may request deletion at any time. Some anonymised data may be kept for analytics.
8. Changes to This Policy
We may update this Privacy Policy from time to time and will notify you of material changes by email or in-app notice.
Data protection questions? Email [email protected].