Privacy Policy

JobInflux ("we", "us") operates the job board at jobinflux.com. We are the data controller for the personal information described in this policy, which means we decide why and how it is used.

We handle personal information in line with the Nigeria Data Protection Act 2023 and, where it applies to you, other applicable data protection law.

For any privacy question or request, contact [email protected].

Account information. Your name, email address, password (stored only in hashed form), and the account type you choose.

Profile and CV data. For job seekers: your headline, work history, education, skills, location, phone number, links and any CV or documents you upload. This is provided by you, and it is your choice what to include.

Application data. The jobs you apply for, the CV or cover note you submit, answers you provide, and the status of those applications.

Employer and company data. Company name, registration and verification documents, recruiter contact details, and the listings you publish.

Payments and billing. Your plan, invoice history and transaction references. Card payments are handled by our payment provider; we do not receive or store your full card number.

Job alerts and communications. The categories, keywords and frequency you choose, your subscription status, and your email engagement preferences.

Technical and usage data. Your IP address in server and security logs, browser and device type, pages viewed, and referring links. Our first-party analytics is deliberately limited, as described in the Analytics section below.

• to create and secure your account and let you sign in;
• to show your profile and applications to you, and to submit an application to an employer when you ask us to;
• to let employers publish listings, receive applications and manage candidates;
• to verify employer companies and prevent fraudulent or misleading listings;
• to process subscriptions, boosts and advertisement bookings, and to calculate the tax due;
• to send service messages, and the job alerts you have asked for;
• to moderate content, detect abuse, and keep the platform and its users safe;
• to measure how the platform is used so we can improve it; and
• to meet our legal, tax and accounting obligations.

We do not use your CV or application data to make automated decisions that produce legal or similarly significant effects about you.

We rely on the following grounds for processing:

• Performance of a contract — to provide the account, applications, listings and paid plans you have asked for.
• Consent — for optional things such as job alert emails, and for non-essential cookies where consent is required.
• Legitimate interests — to secure the platform, prevent fraud, moderate content and improve our services, balanced against your rights.
• Legal obligation — to keep financial records and to respond to lawful requests.

Where we rely on consent, you can withdraw it at any time without affecting your account.

With employers you apply to. When you submit an application, the employer (or the recipient published on the listing) receives the information you chose to send, including your profile details, CV and cover note. What they do with it is their responsibility as a separate data controller.

With service providers. Companies that host, store or secure our systems, or that process payments and email, acting on our instructions. They are listed below.

For legal reasons. Where we are required by law, a court order or a regulator, or where disclosure is necessary to investigate fraud, protect our users, or enforce our terms.

With a successor. If the business is sold, merged or reorganised, information may transfer as part of that transaction, under this policy or an equivalent one.

These providers process data on our behalf for the specific purposes below:

• Cloudflare — DNS, CDN, and network security, and object storage for uploaded files such as CVs.
• Hostinger — application hosting and the business email service we use to send account and job alert emails.
• Our payment provider — card payment processing, fraud checks and transaction records for paid plans and ads.
• Google — advertising services, where advertising is enabled on the platform.

We choose providers that offer appropriate safeguards, and we keep the list current as our stack changes.

We use essential cookies and similar storage to keep you signed in, protect against cross-site request forgery, and remember preferences such as filters. These are required for the site to function, so they are not optional.

We also display advertisements to help support the platform. Some banner ads are booked directly by our own advertisers ("house ads"). These are served by us and do not set third-party tracking cookies. We measure aggregate impressions and clicks on house ads for billing and reporting, and this does not personally identify you.

In addition, we may use third-party advertising, including Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.

• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
• You may opt out of personalised advertising by visiting Google Ads Settings.
• You can also opt out of a third-party vendor's use of cookies for personalised advertising at aboutads.info.
• For more information on how Google uses data, see the Google Privacy & Terms page.

Where required by law, for example for visitors in the EEA and the UK, we request consent before serving non-essential cookies through a cookie consent notice.

We collect privacy-conscious first-party analytics for public pages. This includes page paths, referral sources, timestamps, and a one-way hashed session identifier used to estimate unique visitors.

We do not store IP addresses or full browser user-agent strings in this analytics dataset. Administrative, account, application, upload, billing and payment pages are excluded from it, and browser Do Not Track requests are respected.

We keep personal information only for as long as we need it for the purposes described above:

• Account and profile data — while your account is active, and for a short period afterwards in case you return or need your records.
• Applications and CVs — while your account is active, unless you delete them sooner.
• Billing and payment records — for as long as tax and accounting rules require us to keep them.
• Raw first-party analytics — normally up to 365 days.
• Security and server logs — for a limited period needed to investigate abuse.

When we no longer need information, we delete it or make it anonymous.

We use encryption in transit, hashed passwords, access controls, and reputable infrastructure providers to protect your information. Uploaded documents are stored in private storage rather than on public URLs.

No method of transmission or storage over the internet is completely secure, so we cannot promise absolute security. If a breach affects your rights, we will notify you and the relevant regulator as required by law.

Please help by using a strong, unique password and by telling us straight away if you suspect your account has been accessed.

Subject to applicable law, you have the right to:

• be informed about how your data is used;
• access the personal information we hold about you;
• have inaccurate or incomplete information corrected;
• have your information deleted, in the circumstances the law provides;
• object to, or ask us to restrict, certain processing;
• receive your information in a portable format where technically feasible;
• withdraw consent you have previously given; and
• complain to the Nigeria Data Protection Commission.

Much of this you can do yourself: update or delete your profile and CV from your account settings, and manage your job alert preferences from your alerts page.

For anything else, email [email protected]. We may need to confirm your identity before we act. We will respond within the period the law allows, and we aim to be quick.

Some of our providers operate servers outside Nigeria, so your information may be processed in other countries. Where that happens, we take steps to ensure your information remains protected, such as relying on providers that offer appropriate contractual safeguards and security commitments, consistent with the Nigeria Data Protection Act.

JobInflux is not intended for anyone under 16, and we do not knowingly collect information from children under 16. If you believe a child has created an account, contact us and we will delete it.

We may update this policy as the platform or the law changes, and the "last updated" date at the top of this page will change when we do.

Where a change is significant, we will give reasonable notice, for example by email or a notice on the platform. Continuing to use JobInflux after an update means the revised policy applies.

For any privacy question, data request or complaint, contact [email protected] or use the contact form.

If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission.