1. Introduction

Prezidox Academy (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This privacy policy describes how we collect, use, and process your personal data when you visit and use our candidate Post-UTME preparation platform, in accordance with the Nigeria Data Protection Act (NDPA) and the Nigeria Data Protection Regulation (NDPR).

By registering on Prezidox Academy and using our services, you consent to the collection and use of information in accordance with this policy.

2. Data We Collect

We collect and process personal data about you to provide a personalised CBT mock test experience. This includes:

• Identity Data: First name, last name.
• Contact Data: Email address.
• Academic Focus Profile: Target university screening focus (UNILAG or OAU Post-UTME) and selected subject combinations.
• Usage and Stats Data: Points earned, current streaks, mock test session scores, performance metrics, and history of completed CBT sessions.

3. How We Use Your Data

We only use your personal data for clear, lawful purposes. These include:

• Providing and maintaining our CBT practice dashboards, leaderboards, and study halls.
• Tracking your mock exam performance history and calculating your ranks and streaks.
• Sending verification emails, password reset links, and critical platform notifications.
• Verifying subscription payments and activating full premium accounts.

4. Cookies Policy

We use cookies to improve your user experience and secure session management. We set standard secure cookies to store authentication details (JWT) so that you remain logged in during your sessions.

We store JWTs exclusively in HTTP-Only, Secure cookies. This protects your session tokens from access via third-party browser scripts (mitigating XSS session hijacks).

5. Third-Party Services

We partner with verified, industry-leading third-party service providers to handle critical backend functions. These processors are contractually bound to treat your data with absolute security:

• Paystack (Payment Gateway): All subscription plan payments are securely processed by Paystack. We do not store, process, or view credit/debit card numbers on our servers.
• SendGrid (Email Delivery): Used to deliver system emails (account activation, password recovery, billing).
• Railway (Hosting & Infrastructure): Our database and application servers run on Railway's secure cloud infrastructure.

6. Your Data Rights

Under the Nigeria Data Protection Regulation (NDPR), you have clear rights regarding the data we hold about you:

• Right of Access: You can request confirmation of whether we process your data and receive copies.
• Right to Rectification: You can correct incomplete or inaccurate data through your profile settings page.
• Right to Erasure: You can request that we delete your account and all associated test records, subject to valid legal obligations.
• Right to Withdraw Consent: You have the right to withdraw your consent to data processing at any time.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including the duration of the 2026 university screening cycles. If your account remains inactive for more than twelve (12) months following the completion of the examinations, we will securely archive or permanently delete your personal information.

8. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to make a formal privacy request, please contact our Data Protection Officer at:

Email: privacy@prezidox.com