1. Who We Are
NGCareerPro is operated by R Console Nig Ltd, a company registered in the Federal Republic of Nigeria. We provide an AI-powered career guidance and management platform for higher education institutions.
Registered address: 117 Nusaiba Tower, Ahmadu Bello Way, Mabushi, Abuja, Nigeria.
Email: [email protected] | Phone: +2348133651766
2. Scope of This Policy
This policy applies to all personal data processed by NGCareerPro when you use our platform as a student, counsellor, or institution administrator. It covers data collected via our website (www.ngcareerpro.com), mobile-optimised web app, and email communications.
3. Legal Basis — NDPA 2023
We process personal data in compliance with the Nigeria Data Protection Act 2023 (NDPA 2023) and the Nigeria Data Protection Regulation (NDPR). Our lawful bases for processing include:
- Contractual necessity — to deliver the services your institution has purchased
- Legitimate interest — to improve platform features and student outcomes
- Consent — where explicitly obtained (e.g. marketing communications)
- Legal obligation — to comply with applicable Nigerian laws
4. Data We Collect
4.1 Institutional Data
- Institution name, address, and accreditation status
- Contact person name, job title, and official email address
- Billing and payment records (no card data stored — bank transfer only)
4.2 Staff / Administrator Data
- Full name, work email address, and phone number
- Role within the institution (e.g. career director, registrar)
- Login activity logs and session data
4.3 Student Data
- Name, matriculation number, faculty, department, and year of study
- Career assessment responses (personality and interest surveys)
- AI Advisor conversation history
- Career goal, roadmap progress, and employability score
- NYSC and graduate outcome data (if submitted post-graduation)
4.4 Technical Data
- IP address, browser type, device type, operating system
- Session duration, pages visited, and feature usage patterns
- Error logs and performance data
5. How We Use Your Data
- To deliver and personalise the platform for students and counsellors
- To generate career roadmaps, assessments, and AI advisor responses
- To produce graduate outcome reports for institutional accreditation
- To process billing and send invoices
- To send transactional emails (invoice delivery, account activation, payment confirmation)
- To improve AI models and platform features using anonymised, aggregated data
- To comply with applicable law and respond to regulatory requests
6. AI Processing
Our AI Career Advisor is powered by Anthropic Claude. Student prompts and advisor responses are processed via Anthropic's API. We do not share personally identifiable information with Anthropic's training processes. Career recommendations are generated programmatically and reviewed periodically by our team to ensure quality and safety.
7. Data Sharing
We do not sell your personal data. We share data only in the following circumstances:
- Service providers: Hosting (Railway, Vercel), email delivery (ZeptoMail), database infrastructure (PostgreSQL on Railway) — all under data processing agreements
- Your institution: Student data is accessible to authorised career counsellors and administrators at your institution
- Regulators: Where required by Nigerian law (NDPC, NCC, or court order)
- Business transfers: If NGCareerPro is acquired, data may be transferred subject to equivalent protections
8. Data Retention
- Student data: Retained for 5 years after graduation or account deactivation
- Invoice and billing records: Retained for 7 years in compliance with FIRS requirements
- AI conversation logs: Retained for 2 years, then anonymised
- Access logs: Retained for 12 months, then deleted
9. Your Rights Under NDPA 2023
Subject to applicable law, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request erasure of your data (subject to legal retention obligations)
- Objection — object to processing based on legitimate interest
- Portability — receive your data in a structured, machine-readable format
- Complaint — lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng
To exercise any of these rights, submit a Data Subject Access Request (DSAR) by emailing [email protected] with the subject line "Data Rights Request — [Your Name / Institution]". We will acknowledge your request within 5 working days and respond fully within 30 days as required by the NDPA 2023. You may also use the Data Rights section in your account settings to submit a request directly.
10. Breach Notification
NGCareerPro maintains a documented Incident Response Procedure. In the event of a personal data breach that is likely to result in risk to the rights and freedoms of data subjects:
- We will notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of the breach, as required under NDPA 2023 §40
- Where the breach poses a high risk to individuals, we will notify affected data subjects without undue delay
- Breach notifications will include: nature of the breach, categories and approximate number of individuals affected, likely consequences, and measures taken or proposed to address the breach
- All breach incidents are logged internally and reviewed by the Data Protection Officer
To report a suspected data breach or security vulnerability, contact: [email protected]
11. Security
We implement industry-standard security measures including TLS 1.3 encryption in transit, bcrypt password hashing, JWT-based authentication, role-based access control (five distinct roles), CORS protections, audit logging of all administrative actions, and regular security reviews. Payment is via bank transfer only — no card data is stored. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but maintain commercially reasonable protections.
12. Cookies
We use cookies and similar technologies to maintain your login session, remember your preferences, and collect usage analytics. See our Cookie Policy for full details.
13. Children
NGCareerPro is designed for use by university-level students (typically 16+). We do not knowingly collect data from children under 16. If you believe a child has provided data, contact us immediately.
14. Changes to This Policy
We may update this policy from time to time. Material changes will be notified by email to institutional administrators and announced on our website with at least 14 days notice. Continued use of the platform after notification constitutes acceptance of the updated policy.
15. Data Protection Officer (DPO)
NGCareerPro has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the NDPA 2023 and this Privacy Policy. The DPO can be contacted directly for any data protection concerns, DSAR requests, or breach reports:
- DPO Email: [email protected]
- Post: Data Protection Officer, R Console Nig Ltd, 117 Nusaiba Tower, Ahmadu Bello Way, Mabushi, Abuja, Nigeria
You also have the right to escalate any unresolved complaints directly to the Nigeria Data Protection Commission (NDPC): ndpc.gov.ng
16. Contact
For general privacy-related enquiries:
Email: [email protected]
DPO: [email protected]
WhatsApp: +2348133651766
Post: 117 Nusaiba Tower, Ahmadu Bello Way, Mabushi, Abuja, Nigeria