Privacy Policy
At TechAid Connect, your privacy is of paramount importance to us. This Privacy Policy outlines how we collect, use, share, and protect your information.
1. Information We Collect
We collect two types of information:
1.1. Personal Information
This includes any information that identifies you as an individual, such as:
- Name and Contact Details
- Technical Skillsets (for volunteers)
- Mission and Impact Data (for non-profits)
- Profile Metadata
1.2. Non-Personal Information
This includes technical data that does not identify you personally, such as:
- Your browser's user-agent string, kept with contact form submissions and security log entries
- IP address (for security audit logs)
- Usage patterns and performance metrics
2. How We Use Your Information
TechAid Connect is a mission-driven platform. We use your data to:
- Bridge the gap between non-profits and technical volunteers.
- Ensure platform security via audit logs and IP monitoring.
- Deliver standardised project workspaces and communication tools.
3. Data Sovereignty & Sharing
Why we publish your profile. We publish your profile because doing so is necessary to provide the service you registered for. The legal basis for this processing is the performance of a contract between you and TechAid Connect.
We do not sell your data. Data is shared only to facilitate technical volunteering:
- Public Profiles: Your profile is public. Your name, your role, your listed skills if you are a volunteer, and your bio if you have added one, can be read by anyone who has the link, including people who are not registered. Search engines are a separate choice and it is OFF unless you ask for it: we do not put your profile in our sitemap and we ask search engines not to index the page. If you want to be findable that way, there is a “List my profile in search engines” box when you register and a “Listed in search engines” switch on your profile, and either one turns it on. With it on, our sitemap lists the address of your profile page so search engines can find it; the sitemap does not publish the date you joined, or when you were last active. Turning it off again removes the page from our sitemap and asks search engines to drop it, which they do in their own time rather than ours. Your profile link works either way for anyone you share it with; if you want no public page at all, deactivating your account removes it.
- Hosting and database: ADMIN.NET.PL S.C., trading as serv00, of Tarnów, Poland, with servers in Warsaw, Poland. This holds your account, your profile, your messages and anything you upload. Poland is a member of the European Union and processing there is governed by the GDPR, which imposes obligations at least equivalent in substance to those the Nigeria Data Protection Act places on us. We consider the destination's own statutory regime to be what makes this transfer adequate under section 41(1)(a) of the Nigeria Data Protection Act.
- Email delivery: Google LLC, United States, through Google Workspace. Every message we send you passes through it, including your email address and the content of the message. We rely on contractual safeguards under section 41(1)(a) of the Nigeria Data Protection Act, through Google's Cloud Data Processing Addendum accepted on 8 October 2026.
- Analytics: Google LLC, United States, through Google Analytics (delivered by Google Tag Manager). It does not load until you say yes. We ask once, on your first visit, and if you refuse or simply do not answer, the script is never fetched and nothing is sent. Your answer is kept in a cookie on your own device for 180 days, and you can change it whenever you like with the button below – reachable from the Cookie choice link at the foot of every page. When it does run it receives technical data including your IP address and browser details. We rely on your consent and on contractual safeguards under section 41(1)(a) of the Nigeria Data Protection Act, through Google's Measurement Controller-Controller Data Protection Terms, accepted on 31 March 2025.
- Spam protection: Google LLC, United States, through Google reCAPTCHA. This is not covered by the choice above and runs whether or not you agreed to analytics, because the forms it protects cannot be submitted without it. It loads on three pages only – sign up, log in, and contact us – and on no other page of this site. It receives technical data including your IP address and browser details. We rely on contractual safeguards under section 41(1)(a) of the Nigeria Data Protection Act, through Google's Cloud Data Processing Addendum accepted on 8 October 2026, under Google Cloud project My Project 50890.
- Appointment booking: Google LLC, United States, through Google Calendar. It loads on one page only – a booking page reachable by a link we send you, which is listed nowhere on this site – and only after you press a button asking for the calendar. Until you press it, nothing about your visit is sent to Google. When you do, it receives technical data including your IP address and browser details. We rely on contractual safeguards under section 41(1)(a) of the Nigeria Data Protection Act, through Google's Cloud Data Processing Addendum accepted on 8 October 2026 as a Google Workspace service.
- Legal Compliance: We disclose data only when legally mandated by a court order.
Changing your mind takes one press. This clears the answer we have stored and asks you again, and until you answer nothing is sent to Google.
4. Security Safeguards
We implement enterprise-grade security to protect your data, including encryption in transit (at least TLS 1.3) and strict administrative access controls. Our internal documentation is not published on this site.
5. How Long We Keep Your Information
A daily job removes some data automatically:
- Notifications you have read: deleted 30 days after you read them. Unread notifications are kept.
- Login attempt records: deleted after one day.
- “Remember me” tokens and temporary IP blocks: deleted once they expire.
Everything else is kept until somebody deletes it deliberately. That includes your profile, your projects and applications, your message history, and anything you send us through the contact form, which is stored with the IP address and browser details it was sent from.
Deactivating your account does not erase it. Your profile fields are anonymised, and your message history and completed projects are kept, as the deactivation notice explains.
Backups are kept for 30 days, so data removed today can remain in a backup for up to a month afterwards.
6. Your Rights
You have the right to access, update, or request deletion of your information at any time. For data portability requests or to exercise your rights under the Nigeria Data Protection Act, email privacy@techaidconnect.com. We will respond within 30 days; if a request is complex we may need up to 60, and we will tell you inside the first 30 if that applies.
Where a deletion request is granted, your personal data is removed from active systems. Data removed today may remain in our backups for up to 30 days while those backups cycle out, after which it is gone. Some data may be retained where we have a legal obligation to keep it, in which case we will tell you what we are keeping and why.
One deletion you can make yourself: withdrawing an application you have sent to a project removes that application record.
A second action you cannot reverse yourself: testimonials submitted on completed projects are permanent once posted. If yours is public, your name and your words appear on pages of this site that anyone can read, including visitors who are not registered. The public checkbox is ticked by default and you can untick it before submitting. Afterwards you cannot change the words or the rating, and the only visibility change available to you is to make a private testimonial public from your dashboard, which cannot be undone. Nothing you write is shown to anybody until the other participant on that project has written theirs, whether you tick the box or not, which also means a testimonial may never appear at all if they never write one. If you untick it, your words and your rating are not published; they are shown to that participant instead, on their dashboard. There is only one other participant, so they will know the feedback is yours. To have a testimonial changed or removed, email privacy@techaidconnect.com.
If you are not satisfied with how we handle your information or answer a request, you can complain to the Nigeria Data Protection Commission, the regulator the Nigeria Data Protection Act established. Its published contact details are ndpc.gov.ng and info@ndpc.gov.ng.