Privacy Policy

This Privacy Policy applies to all users of the SupervisorSync platform, including but not limited to: Students, Supervisors, Administrators, and institutional stakeholders who access or use the system.

Personal data is processed under the lawful bases provided by the NDPA, including:

• Performance Of A Contractual Or Academic Obligation
• Compliance With Legal And Institutional Requirements
• Legitimate Interests Of The Institution
• User Consent, Where Applicable

The Platform may collect and process the following categories of data:

• Full Name
• Email Address
• Department And Faculty
• Matriculation Number (Students)
• Staff Identification Details (Supervisors)
• User Role (Student, Supervisor, Administrator)
• Authentication And Access Credentials (Securely Hashed)
• Supervision And Allocation Records
• System Activity Logs
• Payment Status And References (Where Applicable)

Collected data is processed strictly for the following purposes:

• User Authentication And Authorization
• Student–Supervisor Allocation And Management
• Academic Supervision Tracking
• Administrative Oversight And Reporting
• System Security, Auditing, And Performance Improvement
• Compliance With Institutional And Regulatory Obligations

Access to personal data is governed by strict role-based authorization:

SupervisorSync implements appropriate technical and organizational measures to protect personal data:

• ASP.NET Identity Authentication Framework
• Password Hashing And Encryption
• Anti-Forgery (CSRF) Protection
• Secure Role-Based Authorization
• Controlled Administrative Access

Personal data is not sold, rented, or disclosed to third parties except:

• Where Required By Law Or Regulation
• Where Required By Institutional Academic Policy
• To Authorized System Administrators Acting Within Their Duties

The Platform uses session cookies strictly for authentication, authorization, and security purposes. No advertising or tracking cookies are employed.

Personal data is retained only for as long as necessary to fulfill academic, administrative, and legal obligations. Data no longer required is securely archived or deleted in accordance with NDPA principles.

In accordance with the NDPA, users have the right to:

• Request Access To Their Personal Data
• Request Correction Of Inaccurate Data
• Request Restriction Or Deletion Of Data (Subject To Academic Requirements)
• Lodge A Complaint With The Institution Or Relevant Data Protection Authority

This Privacy Policy may be updated periodically to reflect legal, regulatory, or system changes. Continued use of the Platform constitutes acceptance of such updates.