Privacy policy
This policy explains how OpportunityHub (operated by Climax Tech Dev Team Ltd, Lagos) handles personal data under the Nigeria Data Protection Act 2023. Last updated: 24 October 2026.
What we collect and why
| Data | Why | How long we keep it |
|---|---|---|
| Name, email, password (stored as a hash) | To run your account | Until you delete your account |
| Your CV file | To build your profile and find matching opportunities | While your plan is active; deleted 90 days after a paid plan ends; a free sample CV is deleted after 30 days. You can delete it at any time. |
| Profile: nationality, residence, qualifications, field, experience, skills, languages | To check your eligibility for opportunities | Until you delete your account |
| Date of birth and gender (optional) | Only to check age limits and women-only programmes | Until you remove them or delete your account |
| Payment references and receipts | To confirm payments and for accounting | Receipts 24 months; payment records as the law requires |
| Login attempts and IP addresses | To protect accounts from guessing attacks | A short period, then deleted |
Your consent
When you upload a CV you tick a box agreeing to us reading it to build your profile and find matching opportunities. We record when you gave that consent. We never guess your date of birth or gender from your CV.
Who sees your data
Your CV and profile are private. They are stored on our server outside the public website and are never sold or shared with opportunity providers. We do not use paid AI services; your CV is read by our own software on our own server.
Your rights
- Access and portability: download your data as a file from your Account page.
- Correction: edit your profile at any time.
- Deletion: delete a CV, or your whole account, from your Account page. CV files are removed immediately.
- Objection and complaints: write to info@opportunityhub.ng. You may also complain to the Nigeria Data Protection Commission.
Security and breaches
Files are stored outside the web root and served only after checking that you own them. Passwords are hashed. If a breach affects your data we will record and assess it, notify the Nigeria Data Protection Commission within 72 hours where the Act requires, and tell affected users.
Cookies
We use one session cookie to keep you logged in and protect forms. We do not use advertising or tracking cookies.