How SupervisorSync collects, uses and protects personal data, in line with the Nigeria Data Protection Act (NDPA) 2023.
SupervisorSync ("the Platform", "we", "our" or "us") is committed to protecting the privacy, confidentiality and integrity of the personal data processed through the system. This policy explains what we collect, why, how it's protected and the choices you have, in line with the Nigeria Data Protection Act (NDPA) 2023.
This policy applies to everyone who uses SupervisorSync, including students, supervisors, department and system administrators, and institutional stakeholders who access the Platform or submit forms on our website.
Where an institution provides student or staff records to us (for example, an eligible-student list), the institution decides how that data is used, and we process it on the institution's behalf.
We process personal data under the lawful bases set out in the NDPA, including:
Depending on your role, we may collect and process:
Full name, email address, alternative email (if you add one), phone number, department and faculty.
Matriculation number (students), staff identification details (supervisors), level, academic session and role.
Profile photo and bio, research interests, supervisor specialisations, project topics, messages and uploaded project work.
Supervisor assignments, topic approvals and appeals, waitlist entries and the reasons behind allocation decisions.
Sign-in credentials (passwords are stored only as secure hashes), IP address, browser and device information, and activity and audit logs.
Payment status and transaction references for session fees.
We use personal data only to:
Access is controlled by role, and every school's data is kept separate from every other school's.
Their own profile, allocation and supervision records.
Records of the students assigned to them.
Department or platform data, strictly for management purposes.
We use appropriate technical and organisational measures, including:
No system is completely secure. If you believe you've found a vulnerability, please report it through our bug bounty programme.
We do not sell or rent personal data. We share it only:
Some of these providers may process data outside Nigeria. Where they do, we rely on the safeguards the NDPA requires for cross-border transfers.
We use essential cookies to keep you signed in, protect forms against forgery and remember security settings. We don't use advertising cookies.
Our public forms (contact, demo booking and bug reports) use Google reCAPTCHA to block spam, which may set its own cookies and is subject to Google's Privacy Policy.
We keep personal data only as long as needed for academic, administrative and legal purposes. When it's no longer needed, it is securely archived or deleted in line with NDPA principles. Records from past academic sessions are kept so allocation history remains accurate.
Under the NDPA, you have the right to:
To use any of these rights, email us using the details below. We may need to confirm your identity first.
We may update this policy to reflect legal, regulatory or product changes. We'll change the "last updated" date above, and tell you by email or in the Platform about significant changes. Continuing to use the Platform after an update means you accept the revised policy.
For privacy questions, concerns or data requests:
Phel · usually answers instantly
Thanks for your feedback!