Privacy policy

Last updated October 5, 2026

This policy is a template prepared for the platform. Have it reviewed by a qualified data-protection adviser before launch and register with the Nigeria Data Protection Commission (NDPC) where required.

Who we are

AuthenticStaff ("we") operates an employment-record and verification platform for employers and employees in Nigeria. Contact our data protection officer at [email protected].

What we collect

Account data: name, email, phone number and password (stored as a one-way hash).
Employee profile data: name, date of birth, gender, National Identification Number (stored encrypted), and employment records entered by your employers.
Incident and dispute records: reports filed by employers, your responses, and supporting files (stored privately).
Payment data: processed by Paystack or Stripe. We never see or store full card numbers.
Technical data: IP address, browser and security logs used to protect accounts.

Why we use it (lawful basis)

To provide the service you or your employer signed up for (contract).
To let registered companies verify employment history and conduct, within the limits of your privacy settings (consent and legitimate interest).
To resolve disputes fairly and keep an audit trail (legitimate interest and legal obligation).
To prevent fraud and secure accounts (legitimate interest).

Who can see your information

Your employer sees the records it creates. Other registered companies see only what your privacy settings allow, and only after confirming they have a lawful reason for the check. Reports removed after a successful dispute are never shown. Our administrators access records only to operate the service and resolve disputes.

Your rights

Under the Nigeria Data Protection Act 2023 you may request access to, correction of, or deletion of your data, object to processing, and withdraw consent. Dispute an inaccurate report from your dashboard, change your visibility in Privacy settings, or email us. You may also complain to the NDPC.

Cookies

We use only essential cookies: a session cookie to keep you signed in and a security token that protects forms. We do not use advertising cookies.

Retention and security

Data is kept while your account or the related employment relationship is active and for as long as needed to meet legal obligations. Identity numbers are encrypted at rest, evidence files are stored privately, all traffic is encrypted in transit, and every login requires a one-time code.