Privacy Policy

1. Information We Collect

We collect the minimum amount of personal data necessary to execute our programmatic operations:

• Account Information: Names, email addresses, professional affiliations, and designated zonal assignments (e.g., specific mentorship cohorts).
• Activity & Reporting Data: Progress tracking metrics, virtual tutoring logs, data collection templates, and performance reports submitted by Fellows and Mentors.
• Integration Tokens: System metadata, OAuth client ID parameters, and temporary session tokens required to safely communicate with integrated cloud platforms (like Google Drive or Google Meet).
• Technical Metadata: IP addresses, browser types, and system timestamps collected via server logs to secure platform architecture.

2. How We Use Your Information

Your data is utilized strictly for the functional deployment of the program:

• To authenticate user identities and maintain role-based access control (RBAC).
• To generate automated, long-lasting virtual meeting spaces and distribute link assets seamlessly into your portal database.
• To aggregate program performance metrics and build comprehensive zonal evaluation reports.
• To enable features like live caption extraction, video processing, or meeting summary generation when integrated with your authorized storage directories.

3. Data Processing & Third-Party Sharing

We do not sell, rent, or trade your personal data. Data is shared only with certified subprocessors necessary to deliver the service:

• Infrastructure Hosting: Secure storage and application deployment frameworks (such as Vercel and MongoDB).
• API Integrations: Data passed through to Google Cloud Services to handle calendar, email, or video processing commands.
• Program Compliance: Aggregated, non-identifying metrics may be shared with leadership stakeholders for programmatic reporting and audit purposes.

4. Data Security & Storage

• All data is encrypted in transit using Transport Layer Security (TLS 1.2 or higher) and at rest using advanced encryption standards (AES-256).
• Multi-factor authentication (MFA) and strict role-based limits ensure that only verified administrative accounts can inspect backend data payloads.
• Data generated during video calls (such as meeting recordings or text transcripts) is routed directly into your specific storage container (e.g., your designated Google Drive) and is not stored or cached on our independent platform servers without explicit instruction.

5. Your Rights and Deletion Requests

You maintain full ownership and control over your personal data. Depending on your jurisdiction, you have the right to:

• Inspect, correct, or update your personal identity records.
• Restrict the programmatic processing of your cohort reports.
• Request the permanent erasure of your account and all associated operational logs from our live relational databases.

To exercise these rights, or to submit questions regarding our data handling frameworks, please contact our administration support team directly at admin@cwcr.ng.