Privacy Policy

1. Who We Are

EduSeat is a digital attendance platform for Nigerian universities and polytechnics, built and operated by Alphastrive Company Limited("Alphastrive", "EduSeat", "we", "us", or "our"). This Privacy Policy explains what personal data we collect from students, lecturers, and university administrators who use the EduSeat platform (web and mobile), and how we use, share, and protect that data.

2. Data We Collect

Depending on your role, we may collect:

• Identity data — full name, matric/staff number, and institutional or personal email address.
• Attendance data — session check-ins, timestamps, and course enrollment records.
• Location data — device GPS coordinates captured at the moment of check-in, used to confirm you are physically present at a session.
• Passport photograph — used for identity verification on your profile and, where enabled, attendance verification.
• Device and usage information — device type, operating system, app version, and IP address, collected automatically for security and diagnostics.

3. How We Use Your Data

• To record and verify attendance at lectures and academic sessions.
• To generate attendance reports and barring lists for lecturers and university administrators.
• To send notifications relevant to your account, such as password resets and session reminders.
• To detect and prevent fraud, proxy attendance, and other misuse of the platform.
• To maintain the security and stability of our systems.

4. Data Sharing

We do not sell your personal data to third parties. We share data only as follows:

• Your university — administrators and lecturers at your institution can access attendance and profile data relevant to their courses and roster.
• Supabase — our database and authentication provider, which stores your account and attendance records.
• Resend — our email delivery provider, used to send transactional emails such as password resets and invites.
• Sentry — our error-monitoring provider, used to diagnose technical issues. Sentry runs server-side only and does not receive your passport photo or location data.
• Cloudflare — used for DNS and email routing infrastructure.

5. Data Retention

• Attendance records are retained for 2 years after graduation or account closure, after which they are deleted or anonymized.
• System and security logs are retained for 90 days.

6. Security

We apply industry-standard safeguards to protect your data, including:

• TLS encryption for all data in transit.
• Row Level Security (RLS) policies that restrict database access strictly by role and university.
• Secure, encrypted storage of authentication tokens.

7. Location Data

Location data is captured only at the moment you check in to a session, to confirm your physical presence on campus. We do not track your location outside of the check-in action, and location coordinates are not stored long-term beyond what is needed to validate that check-in.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data, subject to your university's academic record-keeping obligations.

To exercise any of these rights, contact us at the email below or your university administrator.

9. NDPR Compliance

EduSeat processes personal data in accordance with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act 2023. We act as a data processor on behalf of your university, which acts as the data controller for your academic records.

10. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at contact@eduseat.ng. For technical support with your account, contact support@eduseat.ng.