Privacy Policy

We collect information you provide directly, including:

• Account Data: Full name, email address, password, phone number, and profile details when you register.
• Payment Data: Billing address and payment method details. Payment processing is handled securely by Paystack, Flutterwave, or Stripe — we never store raw card numbers.
• Profile Content: Bio, avatar, skills, credentials, course materials, reviews, and mentor listings you create.
• Communications: Messages sent via our platform, support inquiries, and feedback submissions.

We also automatically collect:

• Usage Data: Pages visited, time spent, links clicked, courses enrolled, and feature interactions.
• Device Data: IP address, browser type, operating system, device identifiers, and approximate location.
• Cookies: See our Cookie Policy for details on tracking technologies.

We use your data to:

• Create and maintain your account
• Process transactions and send receipts
• Personalise course recommendations and content
• Facilitate mentor-student communication
• Improve platform performance and user experience
• Send essential service updates and security alerts
• Detect and prevent fraud, abuse, or policy violations
• Comply with legal obligations (including Nigeria's Data Protection Regulation)

We only share your data in these circumstances:

• With your consent: When you authorise a specific sharing action.
• Service providers: Trusted third parties who help us operate (payment processors, cloud hosting, analytics). They are bound by strict data protection agreements.
• Mentors & Students: As necessary for course participation — mentors see student names and progress; students see mentor public profiles.
• Legal compliance: When required by law, court order, or regulatory authority (e.g., NITDA).
• Business transfers: In connection with a merger, acquisition, or sale of assets.

We never sell your personal information to third parties.

We implement industry-standard security measures:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and penetration testing
• Strict access controls with least-privilege principles
• Secure payment tokenisation via PCI-DSS compliant partners
• Employee data protection training

No system is 100% secure. If a data breach affects your information, we will notify you within 72 hours as required by law.

Under the Nigeria Data Protection Act and similar regulations, you have the right to:

• Access: Request a copy of the data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data (subject to legal retention periods).
• Restriction: Limit how we process your data in certain situations.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests.

To exercise these rights, email privacy@sabimentors.com. We respond within 30 days.

We retain your data for as long as your account is active or as needed to provide services. After account deletion, we may retain limited data for:

• Legal and regulatory compliance (up to 6 years)
• Fraud prevention and security purposes (up to 3 years)
• Legitimate business analytics (anonymised, indefinitely)

We use cookies and similar technologies for platform functionality, analytics, and personalisation. You can manage preferences in your browser settings.

For full details, see our Cookie Policy.

For privacy-related inquiries, contact our Data Protection Officer:

• Email: privacy@sabimentors.com
• Address: Victoria Island, Lagos, Nigeria
• Company: Sabimentors Technologies Ltd