Privacy Policy

EduProfile (“we”) is the data controller for personal data processed through eduprofile.ng and edustaff.ng. We process personal data in line with the Nigeria Data Protection Act 2023.

Privacy questions and requests go to [email protected]. EduProfile is run online and has no office, so we deal with them by email.

• Account details: your name and email address. If you sign up with a password we store only a salted hash of it. If you sign in with Google we receive your name, email address and Google’s identifier for your account.
• Profile content: everything you enter into your profile, such as bio, education, publications, teaching, grants, awards, photos, blog posts and links. Once you publish, the published parts are public.
• CV uploads: if you choose to upload a CV, we read the text from the file and send that text to an AI provider to prepare a draft for you to review. We do not keep the file itself; we keep the draft that comes back.
• Sign-in security: for each browser you sign in from, a random identifier (kept as a hash), your IP address and browser type, and when it was last used. This lets us tell you about a sign-in from somewhere new. We also keep a record of important account actions, such as password and security changes.
• Institution verification: the university email address you give to earn the verified badge.
• Billing: your plan, payment status and payment references. Card details are entered with Paystack and never reach our servers.
• Visitors to a profile: the time of a visit, the referring site and the visitor’s country, plus counts of clicks on links to other sites and of bookings started. We use no cookie for this, do not keep the visitor’s IP address, skip crawlers and the owner’s own visits, and do not count a browser that asks not to be tracked. This powers the owner’s analytics.
• Consultation bookings: the name and email address a visitor enters when booking, shared with the profile owner.
• Blog comments: the name and email address a commenter enters, and the comment. The email address is used for moderation and is not shown on the page.

• To provide your profile, the builder and the features on your plan.
• To extract a draft from a CV you upload. Nothing is published until you review it.
• To take payment, manage your trial and subscription, and send billing notices.
• To send essential messages such as email verification, booking confirmations and comment-moderation notices.
• To keep the service secure and to prevent abuse and spam.
• To show profile owners how their profile is being viewed.

We do not sell personal data and we do not show advertising on profiles or in the dashboard.

We use these providers to run EduProfile, and they process data on our behalf:

• DigitalOcean for hosting and file storage, in New York, United States.
• Cloudflare for DNS, security and delivery of our sites and custom domains, and for Turnstile, the check that tells people from automated programs on sign-up, the booking and comment forms, and sign-in after failed attempts. Turnstile reads information from your browser and your IP address to decide, and Cloudflare handles it under its own policy. Cloudflare Web Analytics also counts visits to our marketing and sign-up pages without cookies.
• Paystack for payments and subscription billing.
• Google, only if you choose to sign in with Google.
• Anthropic, which receives the text of a CV you upload in order to return a structured draft.
• Mailgun and Postmark for sending email, such as verification codes, sign-in alerts, booking confirmations and billing notices.
• Crossref and OpenAlex, only when you look up publications by DOI or ORCID iD, and domain registries, only when you search for a domain name. They receive the DOI, ORCID iD or domain name you searched for.
• Sentry for error tracking, configured to avoid sending the content of your forms or CV.

Some of these providers process data outside Nigeria. We only use providers that give appropriate safeguards for international transfers, as the Nigeria Data Protection Act requires.

We use a cookie to keep you signed in. We do not use advertising or cross-site tracking cookies. The details are in our Cookie Policy.

• Profile content: kept while your subscription is active. If it lapses we suspend the profile rather than delete it, and keep the content until you ask us to delete it or delete your account. A trial account that has not subscribed is deleted automatically 60 days after it was created, with everything in it, and we email you before that happens.
• Visitor analytics: shown only to Pro accounts, and kept for 2 years, after which it is deleted. Sign-in browser records are removed when you forget the browser in Settings or delete your account.
• Uploaded CVs: the file is not kept. The draft extracted from it stays with your account until you discard it or delete your account.
• Billing records: kept as long as tax and accounting rules require.

Under the Nigeria Data Protection Act 2023 you can ask us for access to your personal data, to correct it, to delete it, to restrict or object to how we use it, and to receive a copy in a portable format. Where we rely on your consent you can withdraw it at any time.

You can download your data and delete your account yourself in Settings. To make any other request, email [email protected]. You can also complain to the Nigeria Data Protection Commission.

Visitors who left a booking or comment can ask us to delete it in the same way, and you can ask the profile owner directly.

EduProfile is for academic staff and is not directed at anyone under 18.

If we change this policy in a way that matters to you, we will tell account holders by email before the change takes effect.

See our contact page, or email [email protected].