Privacy Policy

This Privacy Policy explains how ArchiCareer (“we”, “us”, or “our”) handles personal data when you visit archicareer.ng, create an account, publish a profile or portfolio, browse opportunities, apply for a role, or use community features. It applies to visitors, account holders, applicants, firms, and other people whose information is processed through the service.

ArchiCareer is a professional networking and portfolio service for architecture students, architects, studios, and related organisations. This notice is written with the Nigeria Data Protection Act 2023 (NDPA) and applicable Nigerian law in mind. See the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Commission.

For privacy requests, contact hello@archicareer.ng.

The information depends on how you use ArchiCareer. It may include:

• Account details: name, email, authentication identifiers, account role (student, architect, or firm), account status, and profile link. If you use Google sign-in, we receive authentication information made available through that flow, such as an account identifier and, depending on provider permissions, your name and email.
• Profile details: biography, location, school or firm, profile photo, public profile links, software proficiency, and a CV link or file if provided.
• Portfolio and community content: project titles, descriptions, categories, type, year, location, status, role, team contribution, tools, process notes, images, posts, comments, reactions, and follow relationships.
• Opportunity and application information: job listings, cover notes, CV links or files, application status, application messages, and information needed to deliver an application to the organisation that posted the opportunity.
• Settings: profile discoverability and marketing-email preferences.
• Technical and security information: authentication/session information, request and rate-limit events, and diagnostic or security records generated by the service and its infrastructure. The exact fields depend on the provider and configuration.

Do not submit sensitive personal data, identity documents, health information, financial credentials, or another person’s information unless a feature requires it and you have a lawful reason to provide it. The service is not designed to collect special-category personal data.

If you join the ArchiCareer waitlist, we collect your name, email address, professional category, and the time you consented to a launch update. We use those details to manage the list and contact you about the launch. To prevent abuse, we also process a keyed hash of the connection address used to submit the form; rate-limit records are cleaned as new signups are processed. Waitlist entries are not public. You can ask us to remove your entry by emailing hello@archicareer.ng.

Most information is provided by you when registering, editing a profile, uploading a file, publishing content, creating an opportunity, applying, or contacting us. We may also receive authentication information from a provider you select, information generated by your use of the service, and information other users provide in comments, applications, messages, or reports.

We use information to provide the features you request and to operate the service. Depending on the purpose, the lawful basis may be performance of a contract or steps you request before entering one; compliance with legal obligations; your consent; or our legitimate interests, balanced against your rights.

• Create and maintain accounts, profiles, portfolios, applications, and private application conversations.
• Display the profile, projects, posts, comments, reactions, and listings you choose to make public, and help people discover professional work and opportunities.
• Deliver applications and related messages to the applicant and the organisation responsible for the listing.
• Authenticate users, maintain sessions, enforce platform rules, rate-limit abusive activity, protect service security, and investigate reported misconduct.
• Respond to support, privacy, safety, and legal requests; comply with law; and establish, exercise, or defend legal claims.
• Where optional marketing communications are introduced, use relevant contact details only where we have the required consent or other lawful basis. You can change your marketing-email preference in account settings where available or contact us to object or withdraw consent. Necessary security and account messages are not marketing.
• Improve reliability using operational diagnostics and feedback where available. The application code reviewed for this policy does not include an advertising tracker or third-party analytics integration.

Our legitimate interests include operating a safe professional network, preventing fraud and abuse, maintaining reliable listings, and improving the service. We use information reasonably necessary for those purposes.

Your public profile, biography, location, links, portfolio projects and images, posts, comments, reactions, and job listings may be seen by visitors, indexed by search engines, copied, cached, or shared outside ArchiCareer. Discoverability settings may limit certain in-service discovery, but cannot recall information already seen, copied, or cached by others.

Applications and application messages are intended for the applicant and the organisation that posted the relevant listing. They are not intended as public profile content. The listing owner may review your application information to assess your application and contact you.

Profile photos, portfolio images, and post images are stored in public-read storage to display them on public pages. CV files are also currently issued public object URLs. A CV URL may be accessible to anyone who obtains it, even if you do not feature it prominently on your public page. Do not upload a CV containing information you are unwilling to share with people who receive the link. Application CVs are provided to the listing owner.

Browser cookies are used for authentication and secure sessions so sign-in and protected account features work. Blocking or clearing them may sign you out or prevent account features from working. The codebase reviewed does not include advertising cookies or a third-party analytics product. Hosting or authentication providers may create operational technical records.

You can manage cookies through your browser. See our Cookie Policy. We will update it if optional analytics or advertising technologies are introduced.

We do not sell personal data. Information may be shared with:

• Visitors and users when you publish public content.
• The organisation to which you apply, including your application details, CV, cover note, and relevant messages.
• Providers operating authentication, database, file storage, hosting, email delivery, security, and support functions. The current application uses Supabase for authentication, database, and storage, and Google as an optional OAuth sign-in provider. Their own notices apply to information they collect directly.
• Professional advisers, regulators, courts, law-enforcement bodies, or other parties where disclosure is required by law or reasonably needed to protect rights, safety, and the service.
• A successor or transaction party in a proposed or completed reorganisation, financing, sale, or transfer, subject to appropriate safeguards and notice where required.

Providers processing information on our behalf are expected to do so under appropriate contractual or legal safeguards.

Cloud providers may store or process information outside Nigeria. The production account’s configured region is not exposed in the application code, so we cannot identify a single storage country in this notice. Where a cross-border transfer occurs, we will use a transfer basis and safeguards required by the NDPA and applicable rules. Information about relevant recipients and safeguards may be requested from us.

We retain information for as long as reasonably needed to provide the service, maintain your account, comply with law, resolve disputes, enforce agreements, and protect the platform. Periods differ by record type; this service does not currently apply a single fixed deletion schedule to every system.

You can request account deletion in account settings. The current deletion flow removes account-owned files from the avatar, CV, portfolio-image, and post-image storage buckets, then deletes the authentication account and related records according to database relationships. Job listings belonging to a deleted firm account are intentionally retained in closed status with the owner association removed. Backups, security records, legal records, and information already held independently by recipients may persist for a limited period or where law permits or requires it.

To request correction or removal of specific information, write to hello@archicareer.ng. Removal from ArchiCareer cannot remove copies, screenshots, search-engine caches, or records held by another user or recipient.

Subject to the conditions in applicable law, you may request access to your data; correction of inaccurate or incomplete information; erasure or restriction of processing in appropriate circumstances; objection to processing based on legitimate interests or for direct marketing; withdrawal of consent where consent is the basis; and a copy or portability of data where portability rights apply.

Email hello@archicareer.ng from your account email where possible and describe your request. We may ask for proportionate information to verify your identity and protect other people’s data. We will respond within the period required by law. Some information may need to be retained to comply with law, protect another person’s rights, or establish or defend legal claims; if so, we will explain the reason.

You may also lodge a complaint with the Nigeria Data Protection Commission through its official channels at ndpc.gov.ng.

We use measures intended to protect information, including authenticated access controls, row-level database policies, validation of submitted data and files, upload limits, and restrictions on who can manage files. No website, transmission, or storage system can be guaranteed completely secure. Keep your sign-in email account secure and contact us promptly if you suspect unauthorised access.

If a personal-data breach occurs, we will assess it and notify the regulator and affected people when required by law.

ArchiCareer is intended for adults participating in professional education and work. You must be at least 18 years old to create an account. We do not knowingly solicit children’s personal data. If you believe a child has provided information, contact us so we can review and take appropriate steps.

Profiles, listings, and posts may link to external sites. Those services have their own privacy practices. Review their notices before sharing information; ArchiCareer is not responsible for the data handling of external sites.

We may revise this policy when the service or applicable law changes. We will update the date and provide notice through the service or another appropriate channel when a change materially affects users.

Privacy questions and requests: hello@archicareer.ng.