Privacy Policy

1. Who we are

MeritAfrica is operated by YiwSAMA Technologies (the data controller). Contact our Data Protection Officer at dpo@meritafrica.com.

2. What we collect

Account data: name, email, country, track and links you provide (e.g. GitHub).

Assessment data: code submissions, run results, scores and report hashes.

Integrity telemetry: tab-switch and paste events, keystroke timing frames and session metadata, collected only during assessments with your prior consent.

Billing data: plan and transaction references processed by our payment processor; we never store card numbers.

3. Why we process it

To deliver and score assessments, generate verified reports, detect impersonation and plagiarism, operate subscriptions, and — only with your explicit consent — share your profile and reports with recruiters.

Legal bases: performance of contract, consent (assessment telemetry and recruiter sharing), and legitimate interest (platform security).

4. Retention

Verified reports: 12 months. Proctoring media: 90 days. Keystroke replay streams: 180 days. Billing records: as required by law.

You can request erasure at any time via the Right-to-be-Forgotten form in the footer; billing records may be retained where legally required.

5. Sharing & transfers

Recruiters see your profile and reports only when your sharing consent is enabled. Verification pages show only the sealed report referenced by a hash you share.

International transfers use Standard Contractual Clauses. We do not sell personal data.

6. Your rights

Under GDPR and NDPA 2023 you may access, correct, export or erase your data, withdraw consent, and lodge a complaint with your supervisory authority (in Nigeria, the NDPC).

Exercise rights via dpo@meritafrica.com or the footer erasure form. We respond within 30 calendar days.

7. Security

Data is encrypted in transit and at rest; access is role-based and row-level security is enforced in the database. Integrity telemetry is used solely for authenticity evaluation.